summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArmin Kuster <akuster808@gmail.com>2017-11-26 16:23:53 -0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2017-12-11 22:02:58 +0000
commitfc95cd2ee79cd89d4cc0b5b2d925c6175767667a (patch)
treeadf96b9dfc8c3d9aa70ad6f686937d4eb214d295
parent6b3fee6bd7574e883eef69fa0335221a140157ca (diff)
downloadpoky-fc95cd2ee79cd89d4cc0b5b2d925c6175767667a.tar.gz
binutls: Security fix for CVE-2017-9748
affects: <= 2.28 (From OE-Core rev: 1a60007cb6705ba25a2a6d07ccf2c2639d131874) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-devtools/binutils/binutils-2.28.inc1
-rw-r--r--meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch46
2 files changed, 47 insertions, 0 deletions
diff --git a/meta/recipes-devtools/binutils/binutils-2.28.inc b/meta/recipes-devtools/binutils/binutils-2.28.inc
index 6822adbd9a..8a19ac6ad1 100644
--- a/meta/recipes-devtools/binutils/binutils-2.28.inc
+++ b/meta/recipes-devtools/binutils/binutils-2.28.inc
@@ -59,6 +59,7 @@ SRC_URI = "\
59 file://CVE-2017-9745.patch \ 59 file://CVE-2017-9745.patch \
60 file://CVE-2017-9746.patch \ 60 file://CVE-2017-9746.patch \
61 file://CVE-2017-9747.patch \ 61 file://CVE-2017-9747.patch \
62 file://CVE-2017-9748.patch \
62" 63"
63S = "${WORKDIR}/git" 64S = "${WORKDIR}/git"
64 65
diff --git a/meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch b/meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch
new file mode 100644
index 0000000000..02070235a8
--- /dev/null
+++ b/meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch
@@ -0,0 +1,46 @@
1From 63634bb4a107877dd08b6282e28e11cfd1a1649e Mon Sep 17 00:00:00 2001
2From: Nick Clifton <nickc@redhat.com>
3Date: Thu, 15 Jun 2017 12:44:23 +0100
4Subject: [PATCH] Avoid a possible compiler bug by using a static buffer
5 instead of a stack local buffer.
6
7 PR binutils/21582
8 * ieee.c (ieee_object_p): Use a static buffer to avoid compiler
9 bugs.
10
11Upstream-Status: Backport
12CVE: CVE-2017-9748
13Signed-off-by: Armin Kuster <akuster@mvista.com>
14
15---
16 bfd/ChangeLog | 6 ++++++
17 bfd/ieee.c | 2 +-
18 2 files changed, 7 insertions(+), 1 deletion(-)
19
20Index: git/bfd/ieee.c
21===================================================================
22--- git.orig/bfd/ieee.c
23+++ git/bfd/ieee.c
24@@ -1875,7 +1875,7 @@ ieee_object_p (bfd *abfd)
25 char *processor;
26 unsigned int part;
27 ieee_data_type *ieee;
28- unsigned char buffer[300];
29+ static unsigned char buffer[300];
30 ieee_data_type *save = IEEE_DATA (abfd);
31 bfd_size_type amt;
32
33Index: git/bfd/ChangeLog
34===================================================================
35--- git.orig/bfd/ChangeLog
36+++ git/bfd/ChangeLog
37@@ -1,5 +1,9 @@
38 2017-06-15 Nick Clifton <nickc@redhat.com>
39
40+ PR binutils/21582
41+ * ieee.c (ieee_object_p): Use a static buffer to avoid compiler
42+ bugs.
43+
44 PR binutils/21581
45 (ieee_archive_p): Likewise.
46