diff options
Diffstat (limited to 'external/poky/meta/recipes-devtools/file/file/CVE-2019-8905_CVE-2019-8907.patch')
| -rw-r--r-- | external/poky/meta/recipes-devtools/file/file/CVE-2019-8905_CVE-2019-8907.patch | 120 |
1 files changed, 0 insertions, 120 deletions
diff --git a/external/poky/meta/recipes-devtools/file/file/CVE-2019-8905_CVE-2019-8907.patch b/external/poky/meta/recipes-devtools/file/file/CVE-2019-8905_CVE-2019-8907.patch deleted file mode 100644 index a55b94c6..00000000 --- a/external/poky/meta/recipes-devtools/file/file/CVE-2019-8905_CVE-2019-8907.patch +++ /dev/null @@ -1,120 +0,0 @@ -From d65781527c8134a1202b2649695d48d5701ac60b Mon Sep 17 00:00:00 2001 -From: Christos Zoulas <christos@zoulas.com> -Date: Mon, 18 Feb 2019 17:46:56 +0000 -Subject: [PATCH] PR/62: spinpx: limit size of file_printable. - -Upstream-Status: Backport -CVE: CVE-2019-8905 -CVE: CVE-2019-8907 -affects < 5.36 - -Signed-off-by: Armin Kuster <akuster@mvista.com> - ---- - src/file.h | 4 ++-- - src/funcs.c | 9 +++++---- - src/readelf.c | 7 ++++--- - src/softmagic.c | 14 ++++++++------ - 4 files changed, 19 insertions(+), 15 deletions(-) - -Index: git/src/file.h -=================================================================== ---- git.orig/src/file.h -+++ git/src/file.h -@@ -501,7 +501,7 @@ protected int file_looks_utf8(const unsi - size_t *); - protected size_t file_pstring_length_size(const struct magic *); - protected size_t file_pstring_get_length(const struct magic *, const char *); --protected char * file_printable(char *, size_t, const char *); -+protected char * file_printable(char *, size_t, const char *, size_t); - #ifdef __EMX__ - protected int file_os2_apptype(struct magic_set *, const char *, const void *, - size_t); -Index: git/src/funcs.c -=================================================================== ---- git.orig/src/funcs.c -+++ git/src/funcs.c -@@ -595,12 +595,13 @@ file_pop_buffer(struct magic_set *ms, fi - * convert string to ascii printable format. - */ - protected char * --file_printable(char *buf, size_t bufsiz, const char *str) -+file_printable(char *buf, size_t bufsiz, const char *str, size_t slen) - { -- char *ptr, *eptr; -+ char *ptr, *eptr = buf + bufsiz - 1; - const unsigned char *s = (const unsigned char *)str; -+ const unsigned char *es = s + slen; - -- for (ptr = buf, eptr = ptr + bufsiz - 1; ptr < eptr && *s; s++) { -+ for (ptr = buf; ptr < eptr && s < es && *s; s++) { - if (isprint(*s)) { - *ptr++ = *s; - continue; -Index: git/src/readelf.c -=================================================================== ---- git.orig/src/readelf.c -+++ git/src/readelf.c -@@ -750,7 +750,7 @@ do_core_note(struct magic_set *ms, unsig - if (file_printf(ms, ", from '%.31s', pid=%u, uid=%u, " - "gid=%u, nlwps=%u, lwp=%u (signal %u/code %u)", - file_printable(sbuf, sizeof(sbuf), -- CAST(char *, pi.cpi_name)), -+ CAST(char *, pi.cpi_name), sizeof(pi.cpi_name)), - elf_getu32(swap, (uint32_t)pi.cpi_pid), - elf_getu32(swap, pi.cpi_euid), - elf_getu32(swap, pi.cpi_egid), -@@ -1655,7 +1655,8 @@ dophn_exec(struct magic_set *ms, int cla - return -1; - if (interp[0]) - if (file_printf(ms, ", interpreter %s", -- file_printable(ibuf, sizeof(ibuf), interp)) == -1) -+ file_printable(ibuf, sizeof(ibuf), interp, sizeof(interp))) -+ == -1) - return -1; - return 0; - } -Index: git/src/softmagic.c -=================================================================== ---- git.orig/src/softmagic.c -+++ git/src/softmagic.c -@@ -616,8 +616,8 @@ mprint(struct magic_set *ms, struct magi - case FILE_LESTRING16: - if (m->reln == '=' || m->reln == '!') { - if (file_printf(ms, F(ms, desc, "%s"), -- file_printable(sbuf, sizeof(sbuf), m->value.s)) -- == -1) -+ file_printable(sbuf, sizeof(sbuf), m->value.s, -+ sizeof(m->value.s))) == -1) - return -1; - t = ms->offset + m->vallen; - } -@@ -644,7 +644,8 @@ mprint(struct magic_set *ms, struct magi - } - - if (file_printf(ms, F(ms, desc, "%s"), -- file_printable(sbuf, sizeof(sbuf), str)) == -1) -+ file_printable(sbuf, sizeof(sbuf), str, -+ sizeof(p->s) - (str - p->s))) == -1) - return -1; - - if (m->type == FILE_PSTRING) -@@ -750,7 +751,7 @@ mprint(struct magic_set *ms, struct magi - return -1; - } - rval = file_printf(ms, F(ms, desc, "%s"), -- file_printable(sbuf, sizeof(sbuf), cp)); -+ file_printable(sbuf, sizeof(sbuf), cp, ms->search.rm_len)); - free(cp); - - if (rval == -1) -@@ -777,7 +778,8 @@ mprint(struct magic_set *ms, struct magi - break; - case FILE_DER: - if (file_printf(ms, F(ms, desc, "%s"), -- file_printable(sbuf, sizeof(sbuf), ms->ms_value.s)) == -1) -+ file_printable(sbuf, sizeof(sbuf), ms->ms_value.s, -+ sizeof(ms->ms_value.s))) == -1) - return -1; - t = ms->offset; - break; |