mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-13 17:39:57 +00:00
freerdp3: patch CVE-2025-32659
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32659 Pick the commit that mentioned in the above CVE report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This commit is contained in:
committed by
Anuj Mittal
parent
95d7b8e7d5
commit
a682f5efd0
@@ -0,0 +1,27 @@
|
||||
From 47d18566159cefd714187e9b143a6ecbd1b13781 Mon Sep 17 00:00:00 2001
|
||||
From: akallabeth <akallabeth@posteo.net>
|
||||
Date: Sun, 21 Apr 2024 10:18:43 +0200
|
||||
Subject: [PATCH] fix out of bound read
|
||||
|
||||
CVE: CVE-2024-32659
|
||||
Upstream-Status: Backport [https://github.com/FreeRDP/FreeRDP/commit/6430945ce003a5e24d454d8566f54aae1b6b617b]
|
||||
|
||||
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
|
||||
---
|
||||
libfreerdp/codec/color.c | 3 +++
|
||||
1 file changed, 3 insertions(+)
|
||||
|
||||
diff --git a/libfreerdp/codec/color.c b/libfreerdp/codec/color.c
|
||||
index 186d477c8..9aba6df65 100644
|
||||
--- a/libfreerdp/codec/color.c
|
||||
+++ b/libfreerdp/codec/color.c
|
||||
@@ -847,6 +847,9 @@ BOOL freerdp_image_copy(BYTE* pDstData, DWORD DstFormat, UINT32 nDstStep, UINT32
|
||||
if (!pDstData || !pSrcData)
|
||||
return FALSE;
|
||||
|
||||
+ if ((nWidth == 0) || (nHeight == 0))
|
||||
+ return TRUE;
|
||||
+
|
||||
if (nDstStep == 0)
|
||||
nDstStep = nWidth * FreeRDPGetBytesPerPixel(DstFormat);
|
||||
|
||||
@@ -15,6 +15,7 @@ SRC_URI = "git://github.com/FreeRDP/FreeRDP.git;branch=master;protocol=https \
|
||||
file://CVE-2024-32459.patch \
|
||||
file://CVE-2024-32460.patch \
|
||||
file://CVE-2024-32658.patch \
|
||||
file://CVE-2024-32659.patch \
|
||||
"
|
||||
|
||||
S = "${WORKDIR}/git"
|
||||
|
||||
Reference in New Issue
Block a user