From 8748de4df5a4ece303f07f8bbb248920a199478a Mon Sep 17 00:00:00 2001 From: Hongxu Jia Date: Fri, 23 Nov 2018 15:47:20 +0800 Subject: elfutils: 0.174 -> 0.175 - Drop backport CVE patches 0001-libdwfl-Sanity-check-partial-core-file-data-reads.patch 0001-size-Handle-recursive-ELF-ar-files.patch 0001-arlib-Check-that-sh_entsize-isn-t-zero.patch - Drop patches that upstream has fixed 0005-fix-a-stack-usage-warning.patch [9a74c19 backends: ppc use define instead of const for size of dwarf_regs array.] - Update debian patches to 0.175 - Rebase local patch to 0.175 0008-build-Provide-alternatives-for-glibc-assumptions-hel.patch Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie --- ...01-arlib-Check-that-sh_entsize-isn-t-zero.patch | 36 ---------------------- 1 file changed, 36 deletions(-) delete mode 100644 meta/recipes-devtools/elfutils/files/0001-arlib-Check-that-sh_entsize-isn-t-zero.patch (limited to 'meta/recipes-devtools/elfutils/files/0001-arlib-Check-that-sh_entsize-isn-t-zero.patch') diff --git a/meta/recipes-devtools/elfutils/files/0001-arlib-Check-that-sh_entsize-isn-t-zero.patch b/meta/recipes-devtools/elfutils/files/0001-arlib-Check-that-sh_entsize-isn-t-zero.patch deleted file mode 100644 index 86cf7c8d50..0000000000 --- a/meta/recipes-devtools/elfutils/files/0001-arlib-Check-that-sh_entsize-isn-t-zero.patch +++ /dev/null @@ -1,36 +0,0 @@ -From b518841fbc1431d7c5baa016e35f10fb647b5958 Mon Sep 17 00:00:00 2001 -From: Mark Wielaard -Date: Thu, 18 Oct 2018 19:01:52 +0200 -Subject: [PATCH] arlib: Check that sh_entsize isn't zero. - -A bogus ELF file could have sh_entsize as zero. Don't divide by zero, -but just assume there are no symbols in the section. - -https://sourceware.org/bugzilla/show_bug.cgi?id=23786 - -Signed-off-by: Mark Wielaard - -CVE: CVE-2018-18521 -Upstream-Status: Backport [http://sourceware.org/git/elfutils.git] -Signed-off-by: Hongxu Jia ---- - src/arlib.c | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/src/arlib.c b/src/arlib.c -index 778e087..a6521e3 100644 ---- a/src/arlib.c -+++ b/src/arlib.c -@@ -252,6 +252,9 @@ arlib_add_symbols (Elf *elf, const char *arfname, const char *membername, - if (data == NULL) - continue; - -+ if (shdr->sh_entsize == 0) -+ continue; -+ - int nsyms = shdr->sh_size / shdr->sh_entsize; - for (int ndx = shdr->sh_info; ndx < nsyms; ++ndx) - { --- -2.7.4 - -- cgit 1.2.3-korg