diff options
author | Hitendra Prajapati <hprajapati@mvista.com> | 2022-12-02 15:11:09 +0530 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-12-13 15:23:34 +0000 |
commit | 873eb777a090f45da26e30508f2b6e61ab6382ce (patch) | |
tree | 45ed8ea85b29c7669f64bb6ca285997831e6b309 /meta/recipes-extended | |
parent | 39c76401c01659b486056b9458462a79d96b524a (diff) | |
download | poky-873eb777a090f45da26e30508f2b6e61ab6382ce.tar.gz |
libarchive: CVE-2022-36227 NULL pointer dereference in archive_write.c
Upstream-Status: Backport from https://github.com/libarchive/libarchive/commit/bff38efe8c110469c5080d387bec62a6ca15b1a5
(From OE-Core rev: e723e791b4faa3d5c755b4669b0901ebd0c368c9)
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended')
-rw-r--r-- | meta/recipes-extended/libarchive/libarchive/CVE-2022-36227.patch | 42 | ||||
-rw-r--r-- | meta/recipes-extended/libarchive/libarchive_3.6.1.bb | 4 |
2 files changed, 45 insertions, 1 deletions
diff --git a/meta/recipes-extended/libarchive/libarchive/CVE-2022-36227.patch b/meta/recipes-extended/libarchive/libarchive/CVE-2022-36227.patch new file mode 100644 index 0000000000..d0d143710c --- /dev/null +++ b/meta/recipes-extended/libarchive/libarchive/CVE-2022-36227.patch | |||
@@ -0,0 +1,42 @@ | |||
1 | From b5332ed6d59ba5113a0a2c67fd82b69fcd5cde68 Mon Sep 17 00:00:00 2001 | ||
2 | From: obiwac <obiwac@gmail.com> | ||
3 | Date: Fri, 22 Jul 2022 22:41:10 +0200 | ||
4 | Subject: [PATCH] libarchive: CVE-2022-36227 Handle a `calloc` returning NULL | ||
5 | (fixes #1754) | ||
6 | |||
7 | Upstream-Status: Backport [https://github.com/libarchive/libarchive/commit/bff38efe8c110469c5080d387bec62a6ca15b1a5] | ||
8 | CVE: CVE-2022-36227 | ||
9 | Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com | ||
10 | --- | ||
11 | libarchive/archive_write.c | 8 ++++++++ | ||
12 | 1 file changed, 8 insertions(+) | ||
13 | |||
14 | diff --git a/libarchive/archive_write.c b/libarchive/archive_write.c | ||
15 | index 66592e8..27626b5 100644 | ||
16 | --- a/libarchive/archive_write.c | ||
17 | +++ b/libarchive/archive_write.c | ||
18 | @@ -201,6 +201,10 @@ __archive_write_allocate_filter(struct archive *_a) | ||
19 | struct archive_write_filter *f; | ||
20 | |||
21 | f = calloc(1, sizeof(*f)); | ||
22 | + | ||
23 | + if (f == NULL) | ||
24 | + return (NULL); | ||
25 | + | ||
26 | f->archive = _a; | ||
27 | f->state = ARCHIVE_WRITE_FILTER_STATE_NEW; | ||
28 | if (a->filter_first == NULL) | ||
29 | @@ -548,6 +552,10 @@ archive_write_open2(struct archive *_a, void *client_data, | ||
30 | a->client_data = client_data; | ||
31 | |||
32 | client_filter = __archive_write_allocate_filter(_a); | ||
33 | + | ||
34 | + if (client_filter == NULL) | ||
35 | + return (ARCHIVE_FATAL); | ||
36 | + | ||
37 | client_filter->open = archive_write_client_open; | ||
38 | client_filter->write = archive_write_client_write; | ||
39 | client_filter->close = archive_write_client_close; | ||
40 | -- | ||
41 | 2.25.1 | ||
42 | |||
diff --git a/meta/recipes-extended/libarchive/libarchive_3.6.1.bb b/meta/recipes-extended/libarchive/libarchive_3.6.1.bb index c795b41628..df9df5e0a6 100644 --- a/meta/recipes-extended/libarchive/libarchive_3.6.1.bb +++ b/meta/recipes-extended/libarchive/libarchive_3.6.1.bb | |||
@@ -32,7 +32,9 @@ PACKAGECONFIG[zstd] = "--with-zstd,--without-zstd,zstd," | |||
32 | 32 | ||
33 | EXTRA_OECONF += "--enable-largefile" | 33 | EXTRA_OECONF += "--enable-largefile" |
34 | 34 | ||
35 | SRC_URI = "http://libarchive.org/downloads/libarchive-${PV}.tar.gz" | 35 | SRC_URI = "http://libarchive.org/downloads/libarchive-${PV}.tar.gz \ |
36 | file://CVE-2022-36227.patch \ | ||
37 | " | ||
36 | UPSTREAM_CHECK_URI = "http://libarchive.org/" | 38 | UPSTREAM_CHECK_URI = "http://libarchive.org/" |
37 | 39 | ||
38 | SRC_URI[sha256sum] = "c676146577d989189940f1959d9e3980d28513d74eedfbc6b7f15ea45fe54ee2" | 40 | SRC_URI[sha256sum] = "c676146577d989189940f1959d9e3980d28513d74eedfbc6b7f15ea45fe54ee2" |