mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-04 14:39:54 +00:00
Code Issues Projects Releases Wiki Activity

p7zip: Fix for CVE-2016-9296

Browse Source 
Add patch to fix CVE-2016-9296

Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Virendra Thakur
2023-04-19 16:01:09 +02:00
committed by Khem Raj
parent db57123c49
commit 102abb1c33
2 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-extended/p7zip/files/CVE-2016-9296.patch
+27
View File
@@ -0,0 +1,27 @@
p7zip: Update CVE-2016-9296 patch URL.
From: Robert Luberda <robert@debian.org>
Date: Sat, 19 Nov 2016 08:48:08 +0100
Subject: Fix nullptr dereference (CVE-2016-9296)
Patch taken from https://sourceforge.net/p/p7zip/bugs/185/
This patch file taken from Debian's patch set for p7zip
Upstream-Status: Backport [https://sourceforge.net/p/p7zip/bugs/185/]
CVE: CVE-2016-9296
Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com>
Index: p7zip_16.02/CPP/7zip/Archive/7z/7zIn.cpp
===================================================================
--- p7zip_16.02.orig/CPP/7zip/Archive/7z/7zIn.cpp
+++ p7zip_16.02/CPP/7zip/Archive/7z/7zIn.cpp
@@ -1097,7 +1097,8 @@ HRESULT CInArchive::ReadAndDecodePackedS
if (CrcCalc(data, unpackSize) != folders.FolderCRCs.Vals[i])
ThrowIncorrect();
}
- HeadersSize += folders.PackPositions[folders.NumPackStreams];
+ if (folders.PackPositions)
+ HeadersSize += folders.PackPositions[folders.NumPackStreams];
return S_OK;
}
meta-oe/recipes-extended/p7zip/p7zip_16.02.bb
+1
View File
@@ -11,6 +11,7 @@ SRC_URI = "http://downloads.sourceforge.net/p7zip/p7zip/${PV}/p7zip_${PV}_src_al
file://0001-Fix-narrowing-errors-Wc-11-narrowing.patch \ file://0001-Fix-narrowing-errors-Wc-11-narrowing.patch \
file://change_numMethods_from_bool_to_unsigned.patch \ file://change_numMethods_from_bool_to_unsigned.patch \
file://CVE-2018-5996.patch \ file://CVE-2018-5996.patch \
file://CVE-2016-9296.patch \
" "
SRC_URI[md5sum] = "a0128d661cfe7cc8c121e73519c54fbf" SRC_URI[md5sum] = "a0128d661cfe7cc8c121e73519c54fbf"