diff options
| author |   Robert Yang <liezhi.yang@windriver.com> | 2017-08-29 02:12:01 -0700 |
|---|---|---|
| committer | Robert Yang <liezhi.yang@windriver.com> | 2017-08-29 17:47:21 -0700 |
| commit | 6041037c68eda7d2ce7d31ee5c81d6d193bc6cf0 (patch) | |
| tree | 82d12176370736492ad2c3a924f0c8a04103bb01 /meta/recipes-support/libpcre/libpcre2/libpcre2-CVE-2017-8786.patch | |
| parent | b880c92a7789b5b0d630252ee84d0cc0e10863e8 (diff) | |
| download | openembedded-core-contrib-6041037c68eda7d2ce7d31ee5c81d6d193bc6cf0.tar.gz | |
libpcre2: Fix CVE-2017-7186rbt/pcre
A fuzz on libpcre1 through the pcretest utility revealed an invalid read in the
library. For who is interested in a detailed description of the bug, will
follow a feedback from upstream:
This was a genuine bug in the 32-bit library. Thanks for finding it. The crash
was caused by trying to find a Unicode property for a code value greater than
0x10ffff, the Unicode maximum, when running in non-UTF mode (where character
values can be up to 0xffffffff).
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Diffstat (limited to 'meta/recipes-support/libpcre/libpcre2/libpcre2-CVE-2017-8786.patch')
0 files changed, 0 insertions, 0 deletions