Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | cpio: update patch to merged version | Ross Burton | 2018-12-05 | 1 | -68/+32 |
| | | | | | | | | | | The segfault on append was fixed upstream with a different patch, so apply that instead. (From OE-Core rev: 24000d1fdba2684202e15371f80bb385722c9d91) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> | ||||
* | cpio: fix crash when appending to archives | Ross Burton | 2018-12-01 | 1 | -0/+87 |
The upstream fix for CVE-2016-2037 introduced a read from uninitialized memory bug when appending to an existing archive, which is an operation we perform when building an image. (From OE-Core rev: 046e3e1fca925febf47b3fdd5d4e9ee2e1fad868) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |