diff options
Diffstat (limited to 'meta/recipes-extended/tar/tar/CVE-2019-9923.patch')
-rw-r--r-- | meta/recipes-extended/tar/tar/CVE-2019-9923.patch | 38 |
1 files changed, 0 insertions, 38 deletions
diff --git a/meta/recipes-extended/tar/tar/CVE-2019-9923.patch b/meta/recipes-extended/tar/tar/CVE-2019-9923.patch deleted file mode 100644 index a2704c3355..0000000000 --- a/meta/recipes-extended/tar/tar/CVE-2019-9923.patch +++ /dev/null @@ -1,38 +0,0 @@ -From cb07844454d8cc9fb21f53ace75975f91185a120 Mon Sep 17 00:00:00 2001 -From: Sergey Poznyakoff <gray@gnu.org> -Date: Mon, 14 Jan 2019 15:22:09 +0200 -Subject: [PATCH] Fix possible NULL dereference (savannah bug #55369) - -* src/sparse.c (pax_decode_header): Check return from find_next_block. - -Upstream-Status: Backport -CVE: CVE-2019-9923 -Affects: tar < 1.32 -Signed-off-by: Armin kuster <akuster@mvista.com> - ---- - src/sparse.c | 4 ++++ - 1 file changed, 4 insertions(+) - -Index: tar-1.31/src/sparse.c -=================================================================== ---- tar-1.31.orig/src/sparse.c -+++ tar-1.31/src/sparse.c -@@ -1267,6 +1267,8 @@ pax_decode_header (struct tar_sparse_fil - { \ - set_next_block_after (b); \ - b = find_next_block (); \ -+ if (!b) \ -+ FATAL_ERROR ((0, 0, _("Unexpected EOF in archive"))); \ - src = b->buffer; \ - endp = b->buffer + BLOCKSIZE; \ - } \ -@@ -1279,6 +1281,8 @@ pax_decode_header (struct tar_sparse_fil - start = current_block_ordinal (); - set_next_block_after (current_header); - blk = find_next_block (); -+ if (!blk) -+ FATAL_ERROR ((0, 0, _("Unexpected EOF in archive"))); - p = blk->buffer; - COPY_BUF (blk,nbuf,p); - if (!decode_num (&u, nbuf, TYPE_MAXIMUM (size_t))) |