Andrej Valek b4659368a0 libupnp: Fix out-of-bound access in create_url_list() (CVE-2016-8863)
If there is an invalid URL in URLS->buf after a valid one, uri_parse is
called with out pointing after the allocated memory. As uri_parse writes
to *out before returning an error the loop in create_url_list must be
stopped early to prevent an out-of-bound access

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-12-26 08:23:18 +01:00
2016-10-21 18:20:43 +02:00
2016-09-05 13:30:51 +02:00

Collection of layers for the OE-core universe

Please see the respective READMEs in the layer subdirectories

Description
No description provided
Readme 110 MiB
Languages
BitBake 85%
Shell 6.2%
C 3%
Roff 2.2%
NASL 1.9%
Other 1.5%