mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-16 16:27:27 +00:00
Gyorgy Sarvari
ab86e1f967
Details:
https://nvd.nist.gov/vuln/detail/CVE-2018-13440
https://nvd.nist.gov/vuln/detail/CVE-2018-17059
The patches have been backported from Debian - upstream
has been inactive for almost a decade by now.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e16a7d11d1)
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
36 lines
1.1 KiB
Diff
36 lines
1.1 KiB
Diff
From 822b732fd31ffcb78f6920001e9b1fbd815fa712 Mon Sep 17 00:00:00 2001
|
|
From: Wim Taymans <wtaymans@redhat.com>
|
|
Date: Thu, 27 Sep 2018 12:11:12 +0200
|
|
Subject: [PATCH] SimpleModule: set output chunk framecount after pull
|
|
|
|
After pulling the data, set the output chunk to the amount of
|
|
frames we pulled so that the next module in the chain has the correct
|
|
frame count.
|
|
|
|
Fixes #50 and #51
|
|
|
|
This patch has been backported from Debian:
|
|
https://sources.debian.org/src/audiofile/0.3.6-7/debian/patches/12_CVE-2018-17095.patch
|
|
|
|
CVE: CVE-2018-17095
|
|
|
|
Upstream-Status: Inactive-Upstream [lastcommit: 2016-Aug-30]
|
|
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
|
|
|
|
---
|
|
libaudiofile/modules/SimpleModule.cpp | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
diff --git a/libaudiofile/modules/SimpleModule.cpp b/libaudiofile/modules/SimpleModule.cpp
|
|
index 2bae1eb..e87932c 100644
|
|
--- a/libaudiofile/modules/SimpleModule.cpp
|
|
+++ b/libaudiofile/modules/SimpleModule.cpp
|
|
@@ -26,6 +26,7 @@
|
|
void SimpleModule::runPull()
|
|
{
|
|
pull(m_outChunk->frameCount);
|
|
+ m_outChunk->frameCount = m_inChunk->frameCount;
|
|
run(*m_inChunk, *m_outChunk);
|
|
}
|
|
|