diff options
Diffstat (limited to 'meta/recipes-support/libpcre/libpcre/CVE-2020-14155.patch')
-rw-r--r-- | meta/recipes-support/libpcre/libpcre/CVE-2020-14155.patch | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/meta/recipes-support/libpcre/libpcre/CVE-2020-14155.patch b/meta/recipes-support/libpcre/libpcre/CVE-2020-14155.patch new file mode 100644 index 0000000000..183512fd7d --- /dev/null +++ b/meta/recipes-support/libpcre/libpcre/CVE-2020-14155.patch | |||
@@ -0,0 +1,41 @@ | |||
1 | --- pcre-8.43/pcre_compile.c 2020-07-05 22:26:25.310501521 +0530 | ||
2 | +++ pcre-8.43/pcre_compile1.c 2020-07-05 22:30:22.254489562 +0530 | ||
3 | |||
4 | CVE: CVE-2020-14155 | ||
5 | Upstream-Status: Backport [https://vcs.pcre.org/pcre/code/trunk/pcre_compile.c?view=patch&r1=1761&r2=1760&pathrev=1761] | ||
6 | Signed-off-by: Rahul Taya<Rahul.Taya@kpit.com> | ||
7 | |||
8 | @@ -6,7 +6,7 @@ | ||
9 | and semantics are as close as possible to those of the Perl 5 language. | ||
10 | |||
11 | Written by Philip Hazel | ||
12 | - Copyright (c) 1997-2018 University of Cambridge | ||
13 | + Copyright (c) 1997-2020 University of Cambridge | ||
14 | |||
15 | ----------------------------------------------------------------------------- | ||
16 | Redistribution and use in source and binary forms, with or without | ||
17 | @@ -7130,17 +7130,19 @@ | ||
18 | int n = 0; | ||
19 | ptr++; | ||
20 | while(IS_DIGIT(*ptr)) | ||
21 | + { | ||
22 | n = n * 10 + *ptr++ - CHAR_0; | ||
23 | + if (n > 255) | ||
24 | + { | ||
25 | + *errorcodeptr = ERR38; | ||
26 | + goto FAILED; | ||
27 | + } | ||
28 | + } | ||
29 | if (*ptr != CHAR_RIGHT_PARENTHESIS) | ||
30 | { | ||
31 | *errorcodeptr = ERR39; | ||
32 | goto FAILED; | ||
33 | } | ||
34 | - if (n > 255) | ||
35 | - { | ||
36 | - *errorcodeptr = ERR38; | ||
37 | - goto FAILED; | ||
38 | - } | ||
39 | *code++ = n; | ||
40 | PUT(code, 0, (int)(ptr - cd->start_pattern + 1)); /* Pattern offset */ | ||
41 | PUT(code, LINK_SIZE, 0); /* Default length */ | ||