Peter Marko c36dd4dabd audiofile: mark CVE-2020-18781 as patched
Per [1] this CVE is already patched by commit [2].

This can be also verified with yocto build.

Running without this patch:
root@qemux86-64:~# sfconvert poc.wav output format wave
malloc(): corrupted top size
Aborted

Running with it:
root@qemux86-64:~# sfconvert poc.wav output format wave
Audio File Library: Bad number of coefficients [error 62]
Could not open file 'poc.wav' for reading.

[1] https://github.com/mpruett/audiofile/issues/56
[2] https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 68f55c158e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-11-30 15:13:57 +01:00
2025-10-29 17:05:19 +01:00
2025-11-07 11:37:29 +01:00
2025-11-17 09:08:32 +01:00
2025-11-17 09:08:37 +01:00
2025-11-02 15:09:08 +01:00
2019-06-15 16:45:33 -07:00
2025-09-18 11:49:40 +02:00

Collection of layers for the OE-core universe

Main layer maintainer: Gyorgy Sarvari <skandigraun@gmail.com>
Layer maintainer emeritus: Armin Kuster <akuster808@gmail.com>

This repository is a collection of layers to supplement OE-Core
with additional packages, Each layer have designated maintainer
Please see the respective READMEs in the layer subdirectories
S
Description
No description provided
Readme 113 MiB
Languages
BitBake 85.5%
Shell 6.1%
C 3%
Roff 2.1%
NASL 1.9%
Other 1.1%