From 00ab237b1727155ac1fe8bc97ab3579439f98407 Mon Sep 17 00:00:00 2001 From: Brad Bishop Date: Mon, 14 Oct 2019 11:06:18 -0400 Subject: meta-openembedded: subtree update:fd1a0c9210..1bfaa2e63a MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Alex Kiernan (1): ostree: Upgrade 2019.3 -> 2019.4 Alexander Kanavin (1): lua: change a hard readline dependency into an optional one Andreas Müller (5): catfish: upgrade 1.4.9 -> 1.4.10 polkit-group-rules: Fix error in do_rootfs for rpm package-manager jack: upgrade 1.9.12 -> 1.9.13 fluidsynth: upgrade 2.0.6 -> 2.0.7 xfce4-panel: upgrade 4.14.0 -> 4.14.1 Bartosz Golaszewski (3): networkd-dispatcher: use distro_features_check to check for systemd networkd-dispatcher: remove unneeded RDEPENDS networkd-dispatcher: inherit systemd class Changqing Li (1): multipath-tools: upgrade 0.8.1 -> 0.8.2 Hongxu Jia (1): lvm2: remove unsupported OPTIONS+="event_timeout" rule Khem Raj (6): nvme-cli: Use install-spec target jsonrpc: Disable coverage in default build bdwgc: Enable C++ support and Additional options for musl a2jmidid: Fix build on risv tinyalsa: Update to latest packagegroup-meta-multimedia: Remove libsquish from rdeps Martin Schwan (1): python-waitress: Add recipes Paul Eggleton (1): mosquitto: update to 1.6.7 Peiran Hong (1): tcpdump: Delete unused patch Peter Kjellerstedt (1): kconfig-frontends: Retrieve the Git repository from GitLab Randy MacLeod (1): rwmem: add DESCRIPTION since the summary is vague Trevor Gamblin (1): rsyslog: fix CVE-2019-17040 Zang Ruochen (7): firewalld: upgrade 0.7.1 -> 0.7.2 fetchmail: upgrade 6.3.26 -> 6.4.1 python-asn1crypto: upgrade 0.24.0 -> 1.0.1 python-attrs: upgrade 19.1.0 -> 19.2.0 python-beautifulsoup4: upgrade 4.8.0 -> 4.8.1 python-cmd2: upgrade 0.9.17 -> 0.9.18 python-jinja2: upgrade 2.10.1 -> 2.10.3 Change-Id: Ief2d129403b43b308c19093ac63a498c8d51eb50 Signed-off-by: Brad Bishop --- ...2017-16808-AoE-Add-a-missing-bounds-check.patch | 61 ---------------------- 1 file changed, 61 deletions(-) delete mode 100644 meta-openembedded/meta-networking/recipes-support/tcpdump/tcpdump/0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch (limited to 'meta-openembedded/meta-networking/recipes-support/tcpdump') diff --git a/meta-openembedded/meta-networking/recipes-support/tcpdump/tcpdump/0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch b/meta-openembedded/meta-networking/recipes-support/tcpdump/tcpdump/0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch deleted file mode 100644 index 919f2b009..000000000 --- a/meta-openembedded/meta-networking/recipes-support/tcpdump/tcpdump/0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch +++ /dev/null @@ -1,61 +0,0 @@ -From c45443a0d3e16b92622bea6b589e5930e8f0d815 Mon Sep 17 00:00:00 2001 -From: Peiran Hong -Date: Fri, 13 Sep 2019 17:02:57 -0400 -Subject: [PATCH] CVE-2017-16808/AoE: Add a missing bounds check. - ---- - netdissect.h | 12 ++++++++++++ - print-aoe.c | 1 + - 2 files changed, 13 insertions(+) - -diff --git a/netdissect.h b/netdissect.h -index 089b0406..cd05fdb9 100644 ---- a/netdissect.h -+++ b/netdissect.h -@@ -69,6 +69,11 @@ typedef struct { - typedef unsigned char nd_uint8_t; - typedef signed char nd_int8_t; - -+/* -+ * Use this for MAC addresses. -+ */ -+#define MAC_ADDR_LEN 6 /* length of MAC addresses */ -+ - /* snprintf et al */ - - #include -@@ -309,12 +314,19 @@ struct netdissect_options { - ((uintptr_t)ndo->ndo_snapend - (l) <= (uintptr_t)ndo->ndo_snapend && \ - (uintptr_t)&(var) <= (uintptr_t)ndo->ndo_snapend - (l))) - -+#define ND_TTEST_LEN(p, l) \ -+ (IS_NOT_NEGATIVE(l) && \ -+ ((uintptr_t)ndo->ndo_snapend - (l) <= (uintptr_t)ndo->ndo_snapend && \ -+ (uintptr_t)(p) <= (uintptr_t)ndo->ndo_snapend - (l))) -+ - /* True if "var" was captured */ - #define ND_TTEST(var) ND_TTEST2(var, sizeof(var)) - - /* Bail if "l" bytes of "var" were not captured */ - #define ND_TCHECK2(var, l) if (!ND_TTEST2(var, l)) goto trunc - -+#define ND_TCHECK_LEN(p, l) if (!ND_TTEST_LEN(p, l)) goto trunc -+ - /* Bail if "var" was not captured */ - #define ND_TCHECK(var) ND_TCHECK2(var, sizeof(var)) - -diff --git a/print-aoe.c b/print-aoe.c -index 97e93df2..ac097a04 100644 ---- a/print-aoe.c -+++ b/print-aoe.c -@@ -325,6 +325,7 @@ aoev1_reserve_print(netdissect_options *ndo, - goto invalid; - /* addresses */ - for (i = 0; i < nmacs; i++) { -+ ND_TCHECK_LEN(cp, MAC_ADDR_LEN); - ND_PRINT((ndo, "\n\tEthernet Address %u: %s", i, etheraddr_string(ndo, cp))); - cp += ETHER_ADDR_LEN; - } --- -2.21.0 - -- cgit v1.2.3