mirrors/poky
1
0 Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-10-20 18:38:18 +00:00
Code Issues Projects Releases Wiki Activity

alsa-lib: patch CVE-2026-90781

Browse Source 
Pick patch per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-90781

(From OE-Core rev: ebfe16a8edffc0c2a58b4d0bff831284fb7fcdd5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 37d0e17fbb7848340169ba00ca8dee2567a68462)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Peter Marko authored and Paul Barker committed 2026-10-19 09:03:19 +01:00
1 parent f977765a2e
commit 214ecd84f6
2 files changed
+42
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-90781.patch
+41
View File
@@ -0,0 +1,41 @@
From f84cd4ced7b36fddb8e4ee24404cf7c091d27020 Mon Sep 17 00:00:00 2001
From: Jaroslav Kysela <perex@perex.cz>
Date: Sun, 30 Aug 2026 20:20:30 +0200
Subject: [PATCH] control: ctlparse - another fix for one-byte overrrun in
__snd_ctl_ascii_elem_id_parse
Follows 1e27d63ef6d1dcf7d1f1a1e1eca3ea779e7de377 .
Link: https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/
Reported-by: Harsh Raj Singhania <raj.harshraut@gmail.com>
Signed-off-by: Jaroslav Kysela <perex@perex.cz>
CVE: CVE-2026-90781
Upstream-Status: Backport [https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020]
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
src/control/ctlparse.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/control/ctlparse.c b/src/control/ctlparse.c
index c40de2bd..7132210e 100644
--- a/src/control/ctlparse.c
+++ b/src/control/ctlparse.c
@@ -207,7 +207,7 @@ int __snd_ctl_ascii_elem_id_parse(snd_ctl_elem_id_t *dst, const char *str,
if (*str == '\'' || *str == '\"') {
c = *str++;
while (*str && *str != c) {
- if (size < (int)sizeof(buf)) {
+ if (size < (int)sizeof(buf) - 1) {
*ptr++ = *str;
size++;
}
@@ -217,7 +217,7 @@ int __snd_ctl_ascii_elem_id_parse(snd_ctl_elem_id_t *dst, const char *str,
str++;
} else {
while (*str && *str != ',') {
- if (size < (int)sizeof(buf)) {
+ if (size < (int)sizeof(buf) - 1) {
*ptr++ = *str;
size++;
}
meta/recipes-multimedia/alsa/alsa-lib_1.2.11.bb
+1
View File
@@ -13,6 +13,7 @@ SRC_URI = "https://www.alsa-project.org/files/pub/lib/${BP}.tar.bz2 \
file://0001-topology-correct-version-script-path.patch \
file://CVE-2026-25068.patch \
file://CVE-2026-56109.patch \
file://CVE-2026-90781.patch \
"
SRC_URI[sha256sum] = "9f3f2f69b995f9ad37359072fbc69a3a88bfba081fc83e9be30e14662795bb4d"