summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
diff options
context:
space:
mode:
authorLi Wang <li.wang@windriver.com>2012-12-13 14:51:22 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2013-01-03 12:34:25 +0000
commitcaa1d0308959800ef8d4b730bfbf31fa15593e62 (patch)
tree07456394e7717c51037e2a50b6a614f8124c4956 /meta/recipes-extended
parenta86e32a18b542c2c3c5ce0faf5b162fc6c2ebd50 (diff)
downloadpoky-caa1d0308959800ef8d4b730bfbf31fa15593e62.tar.gz
librsvg: CVE-2011-3146
Store node type separately in RsvgNode commit 34c95743ca692ea0e44778e41a7c0a129363de84 upstream The node name (formerly RsvgNode:type) cannot be used to infer the sub-type of RsvgNode that we're dealing with, since for unknown elements we put type = node-name. This lead to a (potentially exploitable) crash e.g. when the element name started with "fe" which tricked the old code into considering it as a RsvgFilterPrimitive. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3146 https://bugzilla.gnome.org/show_bug.cgi?id=658014 [YOCTO #3581] [ CQID: WIND00376773 ] Upstream-Status: Backport (From OE-Core rev: 6d030fcb69221da073ce413049deb8447934bed5) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Resolved merge conflicts with denzil branch. Fixes denzil bug [YOCTO #3651]. Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended')
0 files changed, 0 insertions, 0 deletions