mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-01-12 03:24:08 +00:00
de8681b4a2
Passing a heavily nested list to sqlparse.parse() leads to a Denial
of Service due to RecursionError.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-4340
Upstream-patch:
b4a39d9850
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
31 lines
800 B
BlitzBasic
31 lines
800 B
BlitzBasic
DESCRIPTION = "Non-validating SQL parser module"
|
|
HOMEPAGE = "http://pypi.python.org/pypi/sqlparse"
|
|
SECTION = "devel/python"
|
|
LICENSE = "BSD-3-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=2b136f573f5386001ea3b7b9016222fc"
|
|
|
|
SRC_URI += "file://0001-sqlparse-change-shebang-to-python3.patch \
|
|
file://run-ptest \
|
|
file://CVE-2023-30608.patch \
|
|
file://CVE-2024-4340.patch \
|
|
"
|
|
|
|
SRC_URI[sha256sum] = "0c00730c74263a94e5a9919ade150dfc3b19c574389985446148402998287dae"
|
|
|
|
export BUILD_SYS
|
|
export HOST_SYS
|
|
|
|
inherit pypi ptest setuptools3
|
|
|
|
RDEPENDS:${PN}-ptest += " \
|
|
${PYTHON_PN}-pytest \
|
|
${PYTHON_PN}-unixadmin \
|
|
"
|
|
|
|
do_install_ptest() {
|
|
install -d ${D}${PTEST_PATH}/tests
|
|
cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/
|
|
}
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|