From c81a204f41bd018964d7ef096087ace5c78365c3 Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Thu, 28 Feb 2019 19:21:12 -0800 Subject: musl: Fix out of bounds data access in dlopen Signed-off-by: Khem Raj Signed-off-by: Richard Purdie --- meta/recipes-core/musl/musl/out_of_bounds_read.patch | 20 ++++++++++++++++++++ meta/recipes-core/musl/musl_git.bb | 1 + 2 files changed, 21 insertions(+) create mode 100644 meta/recipes-core/musl/musl/out_of_bounds_read.patch (limited to 'meta/recipes-core/musl') diff --git a/meta/recipes-core/musl/musl/out_of_bounds_read.patch b/meta/recipes-core/musl/musl/out_of_bounds_read.patch new file mode 100644 index 0000000000..a681cc284e --- /dev/null +++ b/meta/recipes-core/musl/musl/out_of_bounds_read.patch @@ -0,0 +1,20 @@ +Fix out of bounds read + +self->dtv hasn't been extended yet + +Upstream-Status: Pending +Signed-off-by: Khem Raj + +diff --git a/ldso/dynlink.c b/ldso/dynlink.c +index e2c3259f..b23ea0df 100644 +--- a/ldso/dynlink.c ++++ b/ldso/dynlink.c +@@ -1374,7 +1376,7 @@ static void install_new_tls(void) + } + /* Install new dtls into the enlarged, uninstalled dtv copies. */ + for (p=head; ; p=p->next) { +- if (!p->tls_id || self->dtv[p->tls_id]) continue; ++ if (p->tls_id <= old_cnt) continue; + unsigned char *mem = p->new_tls; + for (j=0; j