aboutsummaryrefslogtreecommitdiffstats
path: root/meta-multimedia/recipes-connectivity/libupnp/libupnp/CVE-2016-8863.patch
AgeCommit message (Collapse)Author
2017-02-24libupnp: Fix out-of-bound access in create_url_list() (CVE-2016-8863)Andrej Valek
If there is an invalid URL in URLS->buf after a valid one, uri_parse is called with out pointing after the allocated memory. As uri_parse writes to *out before returning an error the loop in create_url_list must be stopped early to prevent an out-of-bound access Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> (cherry picked from commit b4659368a01a5b4209d9e1e571bb569ef4a06195) Signed-off-by: Armin Kuster <akuster808@gmail.com>