diff options
| author | Shan Hai <shan.hai@windriver.com> | 2014-07-28 01:18:50 -0400 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-10-10 15:06:05 +0100 |
| commit | 4b1b58074959f5d6ecc8dc0a8fedeb5ae7e8c528 (patch) | |
| tree | 969b776c11cd91627d83cb0f1717637592fc6d9e /meta/recipes-core/busybox/files | |
| parent | 65ed47e597609be3c740e383ca6c5a740fa7760a (diff) | |
| download | poky-4b1b58074959f5d6ecc8dc0a8fedeb5ae7e8c528.tar.gz | |
pulseaudio: fix CVE-2014-3970
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module
in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of
service (assertion failure and abort) via an empty UDP packet.
Fix it by picking a patch from pulseaudio upstream code.
(From OE-Core rev: f9d7407e54f1fa3d3a316a5bbb8b80665e6f03fd)
(From OE-Core rev: cf008bce23e897d1c3a51805af839af9241271df)
Signed-off-by: Shan Hai <shan.hai@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/busybox/files')
0 files changed, 0 insertions, 0 deletions