summaryrefslogtreecommitdiffstats
path: root/bitbake/lib/bb
diff options
context:
space:
mode:
authorVivek Kumbhar <vkumbhar@mvista.com>2023-04-21 11:20:27 +0530
committerSteve Sakoman <steve@sakoman.com>2023-04-26 04:19:07 -1000
commit538185bd1c0975dd865b9f185825577e3a4c42c2 (patch)
tree4e96252ac52e3c63a511dddb879ec4a8bef088bf /bitbake/lib/bb
parent6dd66704290f81a5ca4c3d7e13e4137be5f07dba (diff)
downloadpoky-538185bd1c0975dd865b9f185825577e3a4c42c2.tar.gz
go: fix CVE-2023-24537 Infinite loop in parsing
Setting a large line or column number using a //line directive can cause integer overflow even in small source files. Limit line and column numbers in //line directives to 2^30-1, which is small enough to avoid int32 overflow on all reasonbly-sized files. (From OE-Core rev: d1943e6a0ec00653c81cd4c0bb0d6b7e0909094c) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'bitbake/lib/bb')
0 files changed, 0 insertions, 0 deletions