mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-16 04:17:25 +00:00
iperf3: Fix CVE-2025-54350
remove assert to prevent crash due to assertion failure on malformed authentication attempt Reference: https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
committed by
Gyorgy Sarvari
parent
4c10114c66
commit
bfa5f662db
@@ -0,0 +1,25 @@
|
|||||||
|
Subject: [PATCH] iperf3: Fix CVE-2025-54350
|
||||||
|
|
||||||
|
CVE: CVE-2025-54350
|
||||||
|
Upstream-Status: Backport [https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a]
|
||||||
|
Comment: Patch is refreshed as per codebase of 3.14
|
||||||
|
Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
|
||||||
|
---
|
||||||
|
--- a/src/iperf_auth.c 2025-08-19 12:02:47.706337000 +0530
|
||||||
|
+++ b/src/iperf_auth.c 2025-08-19 13:16:01.653471517 +0530
|
||||||
|
@@ -28,7 +28,6 @@
|
||||||
|
#include "iperf_config.h"
|
||||||
|
|
||||||
|
#include <string.h>
|
||||||
|
-#include <assert.h>
|
||||||
|
#include <time.h>
|
||||||
|
#include <sys/types.h>
|
||||||
|
/* FreeBSD needs _WITH_GETLINE to enable the getline() declaration */
|
||||||
|
@@ -150,7 +149,6 @@
|
||||||
|
|
||||||
|
BIO_set_flags(bio, BIO_FLAGS_BASE64_NO_NL); //Do not use newlines to flush buffer
|
||||||
|
*length = BIO_read(bio, *buffer, strlen(b64message));
|
||||||
|
- assert(*length == decodeLen); //length should equal decodeLen, else something went horribly wrong
|
||||||
|
BIO_free_all(bio);
|
||||||
|
|
||||||
|
return (0); //success
|
||||||
@@ -16,6 +16,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=dc6301c8256ceb8f71c9e3c2ae9096b9"
|
|||||||
SRC_URI = "git://github.com/esnet/iperf.git;branch=master;protocol=https \
|
SRC_URI = "git://github.com/esnet/iperf.git;branch=master;protocol=https \
|
||||||
file://0002-Remove-pg-from-profile_CFLAGS.patch \
|
file://0002-Remove-pg-from-profile_CFLAGS.patch \
|
||||||
file://0001-configure.ac-check-for-CPP-prog.patch \
|
file://0001-configure.ac-check-for-CPP-prog.patch \
|
||||||
|
file://CVE-2025-54350.patch \
|
||||||
"
|
"
|
||||||
|
|
||||||
SRCREV = "a0be85934144bc04712a6695b14ea6e45c379e1d"
|
SRCREV = "a0be85934144bc04712a6695b14ea6e45c379e1d"
|
||||||
|
|||||||
Reference in New Issue
Block a user