openjdk: fix CVE-2014-1876

Rather than creating /tmp/unpack.log and insecure permissions,
if unpack cannot create teh specified log file, it defaults to writing
to /dev/null, failing that, stderr. (These are the default options if
it cannot write to /tmp/unpack.log)

Signed-off-by: Amy Fong <amy.fong@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>

1 files changed, 2 insertions, 0 deletions

diff --git a/recipes-core/icedtea/openjdk-7-release-03b147.inc b/recipes-core/icedtea/openjdk-7-release-03b147.inc
index dbdc045..83b087c 100644
--- a/recipes-core/icedtea/openjdk-7-release-03b147.inc
+++ b/recipes-core/icedtea/openjdk-7-release-03b147.inc
@@ -86,6 +86,7 @@ OPENJDK_PATCHES = " \
         file://icedtea-disable-sun.applet-for-tools-in-headless.patch;apply=no \
         file://icedtea-hotspot-fix-undefined-behaviour.patch;apply=no \
         file://icedtea-x11_extension_cleanup.patch;apply=no \
+        file://icedtea-CVE-2014-1876-unpack.patch;apply=no \
         "
 
 OPENJDK_HEADLESS_PATCHES = " \
@@ -106,5 +107,6 @@ export DISTRIBUTION_PATCHES = " \
         patches/icedtea-change-to-gdb-debug-format.patch \
         patches/icedtea-hotspot-fix-undefined-behaviour.patch \
         patches/icedtea-x11_extension_cleanup.patch \
+        patches/icedtea-CVE-2014-1876-unpack.patch \
         ${CLEAN_X11_DISTRIBUTION_PATCH} \
         "