mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-13 17:39:57 +00:00
wolfssl: patch CVE-2026-0819
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0819 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
@@ -0,0 +1,31 @@
|
||||
From ce42215d0dd20742b378211671117db4e6f7e729 Mon Sep 17 00:00:00 2001
|
||||
From: Reda Chouk <reda@wolfssl.com>
|
||||
Date: Thu, 8 Jan 2026 19:57:24 +0100
|
||||
Subject: [PATCH] Increment signedAttribsCount with the right number of
|
||||
attributes it encoded
|
||||
|
||||
(cherry picked from commit 9c7b58656541e8d31876d7ccd2cd38140b8ffb79)
|
||||
|
||||
CVE: CVE-2026-0819
|
||||
Upstream-Status: Backport [https://github.com/wolfSSL/wolfssl/commit/9c7b58656541e8d31876d7ccd2cd38140b8ffb79]
|
||||
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
||||
---
|
||||
wolfcrypt/src/pkcs7.c | 5 +++++
|
||||
1 file changed, 5 insertions(+)
|
||||
|
||||
diff --git a/wolfcrypt/src/pkcs7.c b/wolfcrypt/src/pkcs7.c
|
||||
index a8545ba0a..4ba96c90d 100644
|
||||
--- a/wolfcrypt/src/pkcs7.c
|
||||
+++ b/wolfcrypt/src/pkcs7.c
|
||||
@@ -2107,6 +2107,11 @@ static int wc_PKCS7_BuildSignedAttributes(wc_PKCS7* pkcs7, ESD* esd,
|
||||
|
||||
/* add custom signed attributes if set */
|
||||
if (pkcs7->signedAttribsSz > 0 && pkcs7->signedAttribs != NULL) {
|
||||
+ word32 availableSpace = MAX_SIGNED_ATTRIBS_SZ - atrIdx;
|
||||
+
|
||||
+ if (pkcs7->signedAttribsSz > availableSpace)
|
||||
+ return BUFFER_E;
|
||||
+
|
||||
esd->signedAttribsCount += pkcs7->signedAttribsSz;
|
||||
esd->signedAttribsSz += (word32)EncodeAttributes(
|
||||
&esd->signedAttribs[atrIdx], (int)esd->signedAttribsCount,
|
||||
@@ -27,6 +27,7 @@ SRC_URI = " \
|
||||
file://CVE-2025-7394-4.patch \
|
||||
file://CVE-2025-7394-5.patch \
|
||||
file://CVE-2025-7394-6.patch \
|
||||
file://CVE-2026-0819.patch \
|
||||
"
|
||||
|
||||
SRCREV = "b077c81eb635392e694ccedbab8b644297ec0285"
|
||||
|
||||
Reference in New Issue
Block a user