Shan Hai 4b1b580749 pulseaudio: fix CVE-2014-3970 ...

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module
in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of
service (assertion failure and abort) via an empty UDP packet.

Fix it by picking a patch from pulseaudio upstream code.

(From OE-Core rev: f9d7407e54f1fa3d3a316a5bbb8b80665e6f03fd)

(From OE-Core rev: cf008bce23e897d1c3a51805af839af9241271df)

Signed-off-by: Shan Hai <shan.hai@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-10-10 15:06:05 +01:00

..

pulseaudio

pulseaudio: fix CVE-2014-3970

2014-10-10 15:06:05 +01:00

libatomics-ops_7.2.bb

libatomics-ops: fix PN -> BPN in do_install for multilibs

2013-03-16 17:53:57 +00:00

pulseaudio_5.0.bb

pulseaudio: fix CVE-2014-3970

2014-10-10 15:06:05 +01:00

pulseaudio.inc

pulseaudio: Upgrade 4.0 -> 5.0

2014-03-21 12:05:54 +00:00