mirror of
https://git.yoctoproject.org/poky
synced 2026-04-27 12:32:13 +02:00
b497f2caf7
Pick patch mentioned in NVD links for this CVE. Tested by runniing ptest and CVE reproducer (before&after). Ptest fails on test dist/threads/t/join, however the same test also fails without this patch. (From OE-Core rev: 8e3c821e9ce8f3a9667847a284bc5a6f4973ea13) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
31 lines
1.1 KiB
Diff
31 lines
1.1 KiB
Diff
From 87f42aa0e0096e9a346c9672aa3a0bd3bef8c1dd Mon Sep 17 00:00:00 2001
|
|
From: Karl Williamson <khw@cpan.org>
|
|
Date: Wed, 18 Dec 2024 18:25:29 -0700
|
|
Subject: [PATCH] CVE-2024-56406: Heap-buffer-overflow with tr//
|
|
|
|
This was due to underallocating needed space. If the translation forces
|
|
something to become UTF-8 that is initially bytes, that UTF-8 could
|
|
now require two bytes where previously a single one would do.
|
|
|
|
(cherry picked from commit f93109c8a6950aafbd7488d98e112552033a3686)
|
|
|
|
CVE: CVE-2024-56406
|
|
Upstream-Status: Backport [https://github.com/Perl/perl5/commit/87f42aa0e0096e9a346c9672aa3a0bd3bef8c1dd]
|
|
Signed-off-by: Peter Marko <peter.marko@siemens.com>
|
|
---
|
|
op.c | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
diff --git a/op.c b/op.c
|
|
index 69ff030e88..298b292633 100644
|
|
--- a/op.c
|
|
+++ b/op.c
|
|
@@ -7515,6 +7515,7 @@ S_pmtrans(pTHX_ OP *o, OP *expr, OP *repl)
|
|
* same time. But otherwise one crosses before the other */
|
|
if (t_cp < 256 && r_cp_end > 255 && r_cp != t_cp) {
|
|
can_force_utf8 = TRUE;
|
|
+ max_expansion = MAX(2, max_expansion);
|
|
}
|
|
}
|
|
|