mirror of
https://git.yoctoproject.org/poky
synced 2026-07-26 07:07:08 +00:00
Armin Kuster
dc5f155e15
CVE-2016-2225 Make sure to always terminate decoded string This change is being provide to comply to Yocto compatiblility. (From OE-Core rev: 093d76f3f4a385aae46304bd572ce1545c6bcf33) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
33 lines
1010 B
Diff
33 lines
1010 B
Diff
From bb01edff0377f2585ce304ecbadcb7b6cde372ac Mon Sep 17 00:00:00 2001
|
|
From: Waldemar Brodkorb <wbx@openadk.org>
|
|
Date: Mon, 25 Jan 2016 21:11:34 +0100
|
|
Subject: [PATCH] Make sure to always terminate decoded string
|
|
|
|
Write a terminating '\0' to dest when the first byte of the encoded data
|
|
is 0. This corner case was previously missed.
|
|
|
|
Signed-off-by: Daniel Fahlgren <daniel@fahlgren.se>
|
|
Signed-off-by: Waldemar Brodkorb <wbx@uclibc-ng.org>
|
|
|
|
Upstream-Status: Backport
|
|
http://repo.or.cz/uclibc-ng.git/commit/bb01edff0377f2585ce304ecbadcb7b6cde372ac
|
|
CVE: CVE-2016-2225
|
|
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
|
|
---
|
|
libc/inet/resolv.c | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
Index: git/libc/inet/resolv.c
|
|
===================================================================
|
|
--- git.orig/libc/inet/resolv.c
|
|
+++ git/libc/inet/resolv.c
|
|
@@ -671,6 +671,7 @@ int __decode_dotted(const unsigned char
|
|
if (!packet)
|
|
return -1;
|
|
|
|
+ dest[0] = '\0';
|
|
while (--maxiter) {
|
|
if (offset >= packet_len)
|
|
return -1;
|