mirror of
https://git.yoctoproject.org/poky
synced 2026-05-31 12:49:46 +00:00
lua: update 5.4.4 -> 5.4.6
License-Update: formatting (From OE-Core rev: ae3cfdce20a88748c5ce1fcd46b34e2b88d4de9c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
f3c0c3a35c
commit
a16a8a1cfa
@@ -1,26 +0,0 @@
|
|||||||
From 1f3c6f4534c6411313361697d98d1145a1f030fa Mon Sep 17 00:00:00 2001
|
|
||||||
From: Roberto Ierusalimschy <roberto@inf.puc-rio.br>
|
|
||||||
Date: Tue, 15 Feb 2022 12:28:46 -0300
|
|
||||||
Subject: [PATCH] Bug: Lua can generate wrong code when _ENV is <const>
|
|
||||||
|
|
||||||
CVE: CVE-2022-28805
|
|
||||||
|
|
||||||
Upstream-Status: Backport [https://github.com/lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa]
|
|
||||||
|
|
||||||
Signed-off-by: Steve Sakoman <steve@sakoman.com>
|
|
||||||
---
|
|
||||||
src/lparser.c | 1 +
|
|
||||||
1 files changed, 1 insertions(+)
|
|
||||||
|
|
||||||
diff --git a/src/lparser.c b/src/lparser.c
|
|
||||||
index 3abe3d751..a5cd55257 100644
|
|
||||||
--- a/src/lparser.c
|
|
||||||
+++ b/src/lparser.c
|
|
||||||
@@ -468,6 +468,7 @@ static void singlevar (LexState *ls, expdesc *var) {
|
|
||||||
expdesc key;
|
|
||||||
singlevaraux(fs, ls->envn, var, 1); /* get environment variable */
|
|
||||||
lua_assert(var->k != VVOID); /* this one must exist */
|
|
||||||
+ luaK_exp2anyregup(fs, var); /* but could be a constant */
|
|
||||||
codestring(&key, varname); /* key is variable name */
|
|
||||||
luaK_indexed(fs, var, &key); /* env[varname] */
|
|
||||||
}
|
|
||||||
@@ -1,61 +0,0 @@
|
|||||||
From 42d40581dd919fb134c07027ca1ce0844c670daf Mon Sep 17 00:00:00 2001
|
|
||||||
From: Roberto Ierusalimschy <roberto@inf.puc-rio.br>
|
|
||||||
Date: Fri, 20 May 2022 13:14:33 -0300
|
|
||||||
Subject: [PATCH] Save stack space while handling errors
|
|
||||||
|
|
||||||
Because error handling (luaG_errormsg) uses slots from EXTRA_STACK,
|
|
||||||
and some errors can recur (e.g., string overflow while creating an
|
|
||||||
error message in 'luaG_runerror', or a C-stack overflow before calling
|
|
||||||
the message handler), the code should use stack slots with parsimony.
|
|
||||||
|
|
||||||
This commit fixes the bug "Lua-stack overflow when C stack overflows
|
|
||||||
while handling an error".
|
|
||||||
|
|
||||||
CVE: CVE-2022-33099
|
|
||||||
|
|
||||||
Upstream-Status: Backport [https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf]
|
|
||||||
|
|
||||||
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
||||||
---
|
|
||||||
ldebug.c | 5 ++++-
|
|
||||||
lvm.c | 6 ++++--
|
|
||||||
2 files changed, 8 insertions(+), 3 deletions(-)
|
|
||||||
|
|
||||||
--- a/src/ldebug.c
|
|
||||||
+++ b/src/ldebug.c
|
|
||||||
@@ -824,8 +824,11 @@ l_noret luaG_runerror (lua_State *L, con
|
|
||||||
va_start(argp, fmt);
|
|
||||||
msg = luaO_pushvfstring(L, fmt, argp); /* format message */
|
|
||||||
va_end(argp);
|
|
||||||
- if (isLua(ci)) /* if Lua function, add source:line information */
|
|
||||||
+ if (isLua(ci)) { /* if Lua function, add source:line information */
|
|
||||||
luaG_addinfo(L, msg, ci_func(ci)->p->source, getcurrentline(ci));
|
|
||||||
+ setobjs2s(L, L->top - 2, L->top - 1); /* remove 'msg' from the stack */
|
|
||||||
+ L->top--;
|
|
||||||
+ }
|
|
||||||
luaG_errormsg(L);
|
|
||||||
}
|
|
||||||
|
|
||||||
--- a/src/lvm.c
|
|
||||||
+++ b/src/lvm.c
|
|
||||||
@@ -656,8 +656,10 @@ void luaV_concat (lua_State *L, int tota
|
|
||||||
/* collect total length and number of strings */
|
|
||||||
for (n = 1; n < total && tostring(L, s2v(top - n - 1)); n++) {
|
|
||||||
size_t l = vslen(s2v(top - n - 1));
|
|
||||||
- if (l_unlikely(l >= (MAX_SIZE/sizeof(char)) - tl))
|
|
||||||
+ if (l_unlikely(l >= (MAX_SIZE/sizeof(char)) - tl)) {
|
|
||||||
+ L->top = top - total; /* pop strings to avoid wasting stack */
|
|
||||||
luaG_runerror(L, "string length overflow");
|
|
||||||
+ }
|
|
||||||
tl += l;
|
|
||||||
}
|
|
||||||
if (tl <= LUAI_MAXSHORTLEN) { /* is result a short string? */
|
|
||||||
@@ -672,7 +674,7 @@ void luaV_concat (lua_State *L, int tota
|
|
||||||
setsvalue2s(L, top - n, ts); /* create result */
|
|
||||||
}
|
|
||||||
total -= n-1; /* got 'n' strings to create 1 new */
|
|
||||||
- L->top -= n-1; /* popped 'n' strings and pushed one */
|
|
||||||
+ L->top = top - (n - 1); /* popped 'n' strings and pushed one */
|
|
||||||
} while (total > 1); /* repeat until only 1 result left */
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -1,20 +1,18 @@
|
|||||||
SUMMARY = "Lua is a powerful light-weight programming language designed \
|
SUMMARY = "Lua is a powerful light-weight programming language designed \
|
||||||
for extending applications."
|
for extending applications."
|
||||||
LICENSE = "MIT"
|
LICENSE = "MIT"
|
||||||
LIC_FILES_CHKSUM = "file://doc/readme.html;beginline=307;endline=330;md5=79c3f6b19ad05efe24c1681f025026bb"
|
LIC_FILES_CHKSUM = "file://doc/readme.html;beginline=303;endline=324;md5=e05449eb28c092473f854670c6e8375a"
|
||||||
HOMEPAGE = "http://www.lua.org/"
|
HOMEPAGE = "http://www.lua.org/"
|
||||||
|
|
||||||
SRC_URI = "http://www.lua.org/ftp/lua-${PV}.tar.gz;name=tarballsrc \
|
SRC_URI = "http://www.lua.org/ftp/lua-${PV}.tar.gz;name=tarballsrc \
|
||||||
file://lua.pc.in \
|
file://lua.pc.in \
|
||||||
file://CVE-2022-28805.patch \
|
|
||||||
file://CVE-2022-33099.patch \
|
|
||||||
${@bb.utils.contains('DISTRO_FEATURES', 'ptest', 'http://www.lua.org/tests/lua-${PV_testsuites}-tests.tar.gz;name=tarballtest file://run-ptest ', '', d)} \
|
${@bb.utils.contains('DISTRO_FEATURES', 'ptest', 'http://www.lua.org/tests/lua-${PV_testsuites}-tests.tar.gz;name=tarballtest file://run-ptest ', '', d)} \
|
||||||
"
|
"
|
||||||
|
|
||||||
# if no test suite matches PV release of Lua exactly, download the suite for the closest Lua release.
|
# if no test suite matches PV release of Lua exactly, download the suite for the closest Lua release.
|
||||||
PV_testsuites = "5.4.4"
|
PV_testsuites = "5.4.4"
|
||||||
|
|
||||||
SRC_URI[tarballsrc.sha256sum] = "164c7849653b80ae67bec4b7473b884bf5cc8d2dca05653475ec2ed27b9ebf61"
|
SRC_URI[tarballsrc.sha256sum] = "7d5ea1b9cb6aa0b59ca3dde1c6adcb57ef83a1ba8e5432c0ecd06bf439b3ad88"
|
||||||
SRC_URI[tarballtest.sha256sum] = "04d28355cd67a2299dfe5708b55a0ff221ccb1a3907a3113cc103ccc05ac6aad"
|
SRC_URI[tarballtest.sha256sum] = "04d28355cd67a2299dfe5708b55a0ff221ccb1a3907a3113cc103ccc05ac6aad"
|
||||||
|
|
||||||
inherit pkgconfig binconfig ptest
|
inherit pkgconfig binconfig ptest
|
||||||
Reference in New Issue
Block a user