]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 3b6c47c) | patch
expat: fix CVE-2021-45960
authorSteve Sakoman <steve@sakoman.com>
Wed, 19 Jan 2022 14:51:17 +0000 (04:51 -1000)
committerSteve Sakoman <steve@sakoman.com>
Wed, 19 Jan 2022 15:02:51 +0000 (05:02 -1000)
commit22fe1dea3164a5cd4d5636376f3671641ada1da9
tree8e4dc6fb02d30fb47e74ef180439775a368fc8f8tree | snapshot
parent3b6c47c0ebae9fdb7a13480daf8f46a8dbb2c9bdcommit | diff
expat: fix CVE-2021-45960

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more)
places in the storeAtts function in xmlparse.c can lead to realloc
misbehavior (e.g., allocating too few bytes, or only freeing memory).

Backport patch from:
https://github.com/libexpat/libexpat/pull/534/commits/0adcb34c49bee5b19bd29b16a578c510c23597ea

CVE: CVE-2021-45960
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-core/expat/expat/CVE-2021-45960.patch [new file with mode: 0644] blob
meta/recipes-core/expat/expat_2.2.9.bb diff | blob | history
Mirror of the official openembedded-core repository