summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support/fribidi/fribidi/CVE-2022-25310.patch
blob: d79a82d648fbf09641295dd66ca99f7a967c809b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
From 175850b03e1af251d705c1d04b2b9b3c1c06e48f Mon Sep 17 00:00:00 2001
From: Akira TAGOH <akira@tagoh.org>
Date: Thu, 17 Feb 2022 19:06:10 +0900
Subject: [PATCH] Fix SEGV issue in fribidi_remove_bidi_marks

Escape from fribidi_remove_bidi_marks() immediately if str is null.

This fixes https://github.com/fribidi/fribidi/issues/183

CVE: CVE-2022-25310
Upstream-Status: Backport [https://github.com/fribidi/fribidi/commit/175850b03e1af251d705c1d04b2b9b3c1c06e48f]
Signed-off-by: Pawan Badganchi <Pawan.Badganchi@kpit.com>

---
 lib/fribidi.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/fribidi.c b/lib/fribidi.c
index f5da0da..70bdab2 100644
--- a/lib/fribidi.c
+++ b/lib/fribidi.c
@@ -74,7 +74,7 @@ fribidi_remove_bidi_marks (
   fribidi_boolean status = false;
 
   if UNLIKELY
-    (len == 0)
+    (len == 0 || str == NULL)
     {
       status = true;
       goto out;