Joe Slater 73a75034b9 virglrenderer: fix CVE-2022-0135 and -0175 ...

CVE-2022-0135 concerns out-of-bounds writes in read_transfer_data().
CVE-2022-0175 concerns using malloc() instead of calloc().

We cherry-pick from master.

(From OE-Core rev: 225f8b28ff0b3357382f517f39eb315b4bac9138)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 91f7511df79c5c1f93add9f2827a5a266453614e)

Modify -0175 patch to apply to hardknott branch.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-03-02 00:22:12 +00:00

..

virglrenderer

virglrenderer: fix CVE-2022-0135 and -0175

2022-03-02 00:22:12 +00:00

virglrenderer_0.8.2.bb

virglrenderer: fix CVE-2022-0135 and -0175

2022-03-02 00:22:12 +00:00