diff options
Diffstat (limited to 'external/poky/meta/recipes-devtools/libcomps/libcomps/CVE-2019-3817.patch')
-rw-r--r-- | external/poky/meta/recipes-devtools/libcomps/libcomps/CVE-2019-3817.patch | 97 |
1 files changed, 0 insertions, 97 deletions
diff --git a/external/poky/meta/recipes-devtools/libcomps/libcomps/CVE-2019-3817.patch b/external/poky/meta/recipes-devtools/libcomps/libcomps/CVE-2019-3817.patch deleted file mode 100644 index b8cfb3c4..00000000 --- a/external/poky/meta/recipes-devtools/libcomps/libcomps/CVE-2019-3817.patch +++ /dev/null @@ -1,97 +0,0 @@ -From cea10cd1f2ef6bb4edaac0c1d46d47bf237c42b8 Mon Sep 17 00:00:00 2001 -From: Riccardo Schirone <rschiron@redhat.com> -Date: Mon, 21 Jan 2019 18:11:42 +0100 -Subject: [PATCH] Fix UAF in comps_objmrtree_unite function - -The added field is not used at all in many places and it is probably the -left-over of some copy-paste. - -Upstream-Status: Backport -[https://github.com/rpm-software-management/libcomps/commit -/e3a5d056633677959ad924a51758876d415e7046] - -CVE: CVE-2019-3817 - -Signed-off-by: Kevin Weng <t-keweng@microsoft.com> ---- - libcomps/src/comps_mradix.c | 2 -- - libcomps/src/comps_objmradix.c | 2 -- - libcomps/src/comps_objradix.c | 2 -- - libcomps/src/comps_radix.c | 1 - - 4 files changed, 7 deletions(-) - -diff --git a/libcomps/src/comps_mradix.c b/libcomps/src/comps_mradix.c -index 338cb07..6ceb7c9 100644 ---- a/libcomps/src/comps_mradix.c -+++ b/libcomps/src/comps_mradix.c -@@ -177,7 +177,6 @@ void comps_mrtree_unite(COMPS_MRTree *rt1, COMPS_MRTree *rt2) { - struct Pair { - COMPS_HSList * subnodes; - char * key; -- char added; - } *pair, *parent_pair; - - pair = malloc(sizeof(struct Pair)); -@@ -195,7 +194,6 @@ void comps_mrtree_unite(COMPS_MRTree *rt1, COMPS_MRTree *rt2) { - parent_pair = (struct Pair*) it->data; - free(it); - -- pair->added = 0; - for (it = tmp_subnodes->first; it != NULL; it=it->next) { - pair = malloc(sizeof(struct Pair)); - pair->subnodes = ((COMPS_MRTreeData*)it->data)->subnodes; -diff --git a/libcomps/src/comps_objmradix.c b/libcomps/src/comps_objmradix.c -index 9be6648..8771c89 100644 ---- a/libcomps/src/comps_objmradix.c -+++ b/libcomps/src/comps_objmradix.c -@@ -285,7 +285,6 @@ void comps_objmrtree_unite(COMPS_ObjMRTree *rt1, COMPS_ObjMRTree *rt2) { - struct Pair { - COMPS_HSList * subnodes; - char * key; -- char added; - } *pair, *parent_pair; - - pair = malloc(sizeof(struct Pair)); -@@ -303,7 +302,6 @@ void comps_objmrtree_unite(COMPS_ObjMRTree *rt1, COMPS_ObjMRTree *rt2) { - parent_pair = (struct Pair*) it->data; - free(it); - -- pair->added = 0; - for (it = tmp_subnodes->first; it != NULL; it=it->next) { - pair = malloc(sizeof(struct Pair)); - pair->subnodes = ((COMPS_ObjMRTreeData*)it->data)->subnodes; -diff --git a/libcomps/src/comps_objradix.c b/libcomps/src/comps_objradix.c -index a790270..0ebaf22 100644 ---- a/libcomps/src/comps_objradix.c -+++ b/libcomps/src/comps_objradix.c -@@ -692,7 +692,6 @@ void comps_objrtree_unite(COMPS_ObjRTree *rt1, COMPS_ObjRTree *rt2) { - struct Pair { - COMPS_HSList * subnodes; - char * key; -- char added; - } *pair, *parent_pair; - - pair = malloc(sizeof(struct Pair)); -@@ -711,7 +710,6 @@ void comps_objrtree_unite(COMPS_ObjRTree *rt1, COMPS_ObjRTree *rt2) { - //printf("key-part:%s\n", parent_pair->key); - free(it); - -- //pair->added = 0; - for (it = tmp_subnodes->first; it != NULL; it=it->next) { - pair = malloc(sizeof(struct Pair)); - pair->subnodes = ((COMPS_ObjRTreeData*)it->data)->subnodes; -diff --git a/libcomps/src/comps_radix.c b/libcomps/src/comps_radix.c -index ada4fda..05dcaf2 100644 ---- a/libcomps/src/comps_radix.c -+++ b/libcomps/src/comps_radix.c -@@ -529,7 +529,6 @@ void comps_rtree_unite(COMPS_RTree *rt1, COMPS_RTree *rt2) { - struct Pair { - COMPS_HSList * subnodes; - char * key; -- char added; - } *pair, *parent_pair; - - pair = malloc(sizeof(struct Pair)); --- -2.22.0 - |