diff options
| -rw-r--r-- | meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch | 23 | ||||
| -rw-r--r-- | meta-oe/recipes-devtools/giflib/giflib_5.2.1.bb (renamed from meta-oe/recipes-devtools/giflib/giflib_5.1.4.bb) | 18 | 
2 files changed, 9 insertions, 32 deletions
| diff --git a/meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch b/meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch deleted file mode 100644 index 9957be82f3..0000000000 --- a/meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch +++ /dev/null | |||
| @@ -1,23 +0,0 @@ | |||
| 1 | From 799eb6a3af8a3dd81e2429bf11a72a57e541f908 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: "Eric S. Raymond" <esr@thyrsus.com> | ||
| 3 | Date: Sun, 17 Mar 2019 12:37:21 -0400 | ||
| 4 | Subject: [PATCH] Address SF bug #119: MemorySanitizer: FPE on unknown address | ||
| 5 | |||
| 6 | --- | ||
| 7 | dgif_lib.c | 2 +- | ||
| 8 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
| 9 | |||
| 10 | Upstream-status: Backport [https://sourceforge.net/p/giflib/code/ci/799eb6a3af8a3dd81e2429bf11a72a57e541f908/] | ||
| 11 | CVE: CVE-2019-15133 | ||
| 12 | |||
| 13 | --- a/lib/dgif_lib.c 2021-01-13 19:28:18.923493586 +0100 | ||
| 14 | +++ b/lib/dgif_lib.c 2021-01-13 19:28:55.245863085 +0100 | ||
| 15 | @@ -1099,7 +1099,7 @@ DGifSlurp(GifFileType *GifFile) | ||
| 16 | |||
| 17 | sp = &GifFile->SavedImages[GifFile->ImageCount - 1]; | ||
| 18 | /* Allocate memory for the image */ | ||
| 19 | - if (sp->ImageDesc.Width < 0 && sp->ImageDesc.Height < 0 && | ||
| 20 | + if (sp->ImageDesc.Width <= 0 && sp->ImageDesc.Height <= 0 && | ||
| 21 | sp->ImageDesc.Width > (INT_MAX / sp->ImageDesc.Height)) { | ||
| 22 | return GIF_ERROR; | ||
| 23 | } | ||
| diff --git a/meta-oe/recipes-devtools/giflib/giflib_5.1.4.bb b/meta-oe/recipes-devtools/giflib/giflib_5.2.1.bb index 1871bab46e..105c53eab7 100644 --- a/meta-oe/recipes-devtools/giflib/giflib_5.1.4.bb +++ b/meta-oe/recipes-devtools/giflib/giflib_5.2.1.bb | |||
| @@ -3,14 +3,17 @@ SECTION = "libs" | |||
| 3 | LICENSE = "MIT" | 3 | LICENSE = "MIT" | 
| 4 | LIC_FILES_CHKSUM = "file://COPYING;md5=ae11c61b04b2917be39b11f78d71519a" | 4 | LIC_FILES_CHKSUM = "file://COPYING;md5=ae11c61b04b2917be39b11f78d71519a" | 
| 5 | 5 | ||
| 6 | SRC_URI = " \ | ||
| 7 | ${SOURCEFORGE_MIRROR}/giflib/${BP}.tar.bz2 \ | ||
| 8 | file://CVE-2019-15133.patch \ | ||
| 9 | " | ||
| 10 | |||
| 11 | CVE_PRODUCT = "giflib_project:giflib" | 6 | CVE_PRODUCT = "giflib_project:giflib" | 
| 12 | 7 | ||
| 13 | inherit autotools | 8 | DEPENDS = "xmlto-native" | 
| 9 | |||
| 10 | SRC_URI = "${SOURCEFORGE_MIRROR}/giflib/${BP}.tar.gz" | ||
| 11 | SRC_URI[sha256sum] = "31da5562f44c5f15d63340a09a4fd62b48c45620cd302f77a6d9acf0077879bd" | ||
| 12 | |||
| 13 | do_install() { | ||
| 14 | # using autotools's default will end up in /usr/local | ||
| 15 | oe_runmake DESTDIR=${D} PREFIX=${prefix} LIBDIR=${libdir} install | ||
| 16 | } | ||
| 14 | 17 | ||
| 15 | PACKAGES += "${PN}-utils" | 18 | PACKAGES += "${PN}-utils" | 
| 16 | FILES_${PN} = "${libdir}/libgif.so.*" | 19 | FILES_${PN} = "${libdir}/libgif.so.*" | 
| @@ -19,6 +22,3 @@ FILES_${PN}-utils = "${bindir}" | |||
| 19 | BBCLASSEXTEND = "native" | 22 | BBCLASSEXTEND = "native" | 
| 20 | 23 | ||
| 21 | RDEPENDS_${PN}-utils = "perl" | 24 | RDEPENDS_${PN}-utils = "perl" | 
| 22 | |||
| 23 | SRC_URI[md5sum] = "2c171ced93c0e83bb09e6ccad8e3ba2b" | ||
| 24 | SRC_URI[sha256sum] = "df27ec3ff24671f80b29e6ab1c4971059c14ac3db95406884fc26574631ba8d5" | ||
