sysmo-bts
/
generic-poky
9
0
Fork 0
Code Pull Requests Releases Activity

binutls: Security fix for CVE-2017-9748 

affects: <= 2.28

(From OE-Core rev: 1a60007cb6705ba25a2a6d07ccf2c2639d131874)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Armin Kuster 2017-11-26 16:23:53 -08:00 committed by Richard Purdie
parent 6b3fee6bd7
commit fc95cd2ee7
2 changed files with 47 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
meta/recipes-devtools/binutils/binutils-2.28.inc
View File

@ -59,6 +59,7 @@ SRC_URI = "\
file://CVE-2017-9745.patch \
file://CVE-2017-9746.patch \
file://CVE-2017-9747.patch \
file://CVE-2017-9748.patch \
"
S = "${WORKDIR}/git"

46
meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch Normal file
View File

@ -0,0 +1,46 @@
From 63634bb4a107877dd08b6282e28e11cfd1a1649e Mon Sep 17 00:00:00 2001
From: Nick Clifton <nickc@redhat.com>
Date: Thu, 15 Jun 2017 12:44:23 +0100
Subject: [PATCH] Avoid a possible compiler bug by using a static buffer
instead of a stack local buffer.
PR binutils/21582
* ieee.c (ieee_object_p): Use a static buffer to avoid compiler
bugs.
Upstream-Status: Backport
CVE: CVE-2017-9748
Signed-off-by: Armin Kuster <akuster@mvista.com>
---
bfd/ChangeLog | 6 ++++++
bfd/ieee.c | 2 +-
2 files changed, 7 insertions(+), 1 deletion(-)
Index: git/bfd/ieee.c
===================================================================
--- git.orig/bfd/ieee.c
+++ git/bfd/ieee.c
@@ -1875,7 +1875,7 @@ ieee_object_p (bfd *abfd)
char *processor;
unsigned int part;
ieee_data_type *ieee;
- unsigned char buffer[300];
+ static unsigned char buffer[300];
ieee_data_type *save = IEEE_DATA (abfd);
bfd_size_type amt;
Index: git/bfd/ChangeLog
===================================================================
--- git.orig/bfd/ChangeLog
+++ git/bfd/ChangeLog
@@ -1,5 +1,9 @@
2017-06-15 Nick Clifton <nickc@redhat.com>
+ PR binutils/21582
+ * ieee.c (ieee_object_p): Use a static buffer to avoid compiler
+ bugs.
+
PR binutils/21581
(ieee_archive_p): Likewise.