]> code.ossystems Code Review - openembedded-core.git/commit
cpio: fix crash when appending to archives
authorRoss Burton <ross.burton@intel.com>
Thu, 29 Nov 2018 11:42:14 +0000 (11:42 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sat, 1 Dec 2018 11:37:49 +0000 (11:37 +0000)
commit046e3e1fca925febf47b3fdd5d4e9ee2e1fad868
tree21edea7304fe0570b18ba0b2fcd1a42fc37fd886
parent750ece11bed0e62a11e0003d1d16a81f7c219761
cpio: fix crash when appending to archives

The upstream fix for CVE-2016-2037 introduced a read from uninitialized memory
bug when appending to an existing archive, which is an operation we perform when
building an image.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/cpio/cpio-2.12/0001-Fix-segfault-with-append.patch [new file with mode: 0644]
meta/recipes-extended/cpio/cpio_2.12.bb