diff options
author | Tanu Kaskinen <tanuk@iki.fi> | 2015-12-12 04:23:12 +0200 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-12-16 12:12:15 +0000 |
commit | 2e3a17291cad321a24eb2bef1084d4cc3944ccd4 (patch) | |
tree | ec626dfb7c060cfe3788e6436fe2bc38894fca4b /meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch | |
parent | df183525a5f84b8edea9e98df67052339d01040f (diff) | |
download | poky-2e3a17291cad321a24eb2bef1084d4cc3944ccd4.tar.gz |
libsndfile1: 1.0.25 -> 1.0.26
Main points from the release announcement:
* Fix for CVE-2014-9496, SD2 buffer read overflow.
* Fix for CVE-2014-9756, file_io.c divide by zero.
* Fix for CVE-2015-7805, AIFF heap write overflow.
* Add support for ALAC encoder in a CAF container.
* Add support for Cart chunks in WAV files.
* Minor bug fixes and improvements.
All patches we had are included in the new release.
Dropped PR from the recipe.
(From OE-Core rev: 5a4b8f7f643a4b95a7036eab02c7f74aa4077982)
Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch')
-rw-r--r-- | meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch | 24 |
1 files changed, 0 insertions, 24 deletions
diff --git a/meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch b/meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch deleted file mode 100644 index b54b3ba669..0000000000 --- a/meta/recipes-multimedia/libsndfile/files/libsndfile-fix-CVE-2014-9756.patch +++ /dev/null | |||
@@ -1,24 +0,0 @@ | |||
1 | src/file_io.c : Prevent potential divide-by-zero. | ||
2 | |||
3 | Closes: https://github.com/erikd/libsndfile/issues/92 | ||
4 | |||
5 | Upstream-Status: Backport | ||
6 | |||
7 | Fixes CVE-2014-9756 | ||
8 | |||
9 | Signed-off-by: Erik de Castro Lopo <erikd@mega-nerd.com> | ||
10 | Signed-off-by: Maxin B. John <maxin.john@intel.com> | ||
11 | --- | ||
12 | diff -Naur libsndfile-1.0.25-orig/src/file_io.c libsndfile-1.0.25/src/file_io.c | ||
13 | --- libsndfile-1.0.25-orig/src/file_io.c 2011-01-19 12:12:28.000000000 +0200 | ||
14 | +++ libsndfile-1.0.25/src/file_io.c 2015-11-04 15:02:04.337395618 +0200 | ||
15 | @@ -358,6 +358,9 @@ | ||
16 | { sf_count_t total = 0 ; | ||
17 | ssize_t count ; | ||
18 | |||
19 | + if (bytes == 0 || items == 0) | ||
20 | + return 0 ; | ||
21 | + | ||
22 | if (psf->virtual_io) | ||
23 | return psf->vio.write (ptr, bytes*items, psf->vio_user_data) / bytes ; | ||
24 | |||