linux/poky.git/meta/recipes-core/libxml, branch pyro

libxml2: Fix CVE-2017-8872

2017-09-11T21:15:58+00:00

fix global-buffer-overflow in htmlParseTryOrFinish (HTMLparser.c:5403) https://bugzilla.gnome.org/show_bug.cgi?id=775200 Here is the reproduce steps on ubuntu 16.04, use clang with "-fsanitize=address" ... export CC="clang" export CFLAGS="-fsanitize=address" ./configure --disable-shared make clean all -j wget https://bugzilla.gnome.org/attachment.cgi?id=340871 -O poc ./xmllint --html --push poc ==2785==ERROR: AddressSanitizer: global-buffer-overflow on address 0x000000a0de21 at pc 0x0000006a7f6e bp 0x7ffdfe940c10 sp 0x7ffdfe940c08 READ of size 1 at 0x000000a0de21 thread T0 #0 0x6a7f6d (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x6a7f6d) #1 0x6a7356 (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x6a7356) #2 0x4f4504 (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x4f4504) #3 0x4f045e (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x4f045e) #4 0x7f81977d682f (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) #5 0x419ad8 (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x419ad8) ... (From OE-Core rev: a615b0825927a09a0aa8312d131c9acbaef8956d) (From OE-Core rev: 1c9d891886f35e6cc4485f244180d7d0ffa82cd3) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Revert "Add an XML_PARSE_NOXXE flag to block all entities loading even local"

2017-09-11T21:15:58+00:00

The new flag doesn't work and the change even broke the XML_PARSE_NONET option. (From OE-Core rev: 8b586f60778579ee2c9adae429128a07e8437553) (From OE-Core rev: d2b1486bf8773d3eef36c5e77b82e70c88d9c682) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Make ptest run the Python tests if Python support is enabled

2017-08-31T16:57:11+00:00

Since we go through the trouble of copying the Python tests, we may as well actually run them... This also avoids the following QA issue: ERROR: libxml2-2.9.4-r0 do_package_qa: QA Issue: /usr/lib/libxml2/ptest/python/tests/push.py contained in package libxml2-ptest requires /usr/bin/python, but no providers found in RDEPENDS_libxml2-ptest? [file-rdeps] (From OE-Core rev: 2b9470678d8df152af54899adb4774fb0d481cf3) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

libxml2: move python module to Python 3

2017-08-31T16:57:11+00:00

(From OE-Core rev: 30417429cea525e6eb6c3cfbe760ebe7b13f0980) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

libxml2: Fix CVE-2017-0663

2017-07-27T21:36:44+00:00

Fix type confusion in xmlValidateOneNamespace Comment out code that casts xmlNsPtr to xmlAttrPtr. ID types on namespace declarations make no practical sense anyway. Fixes bug 780228 CVE: CVE-2017-0663 (From OE-Core rev: a965be7b6a1d730851b4a3bc8fd534b9b2334227) (From OE-Core rev: e442e7105ba39ddaed0749614b5ee552f9df2d5a) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Fix CVE-2017-5969

2017-07-27T21:36:44+00:00

Fix NULL pointer deref in xmlDumpElementContent Can only be triggered in recovery mode. Fixes bug 758422 CVE: CVE-2017-5969 (From OE-Core rev: 0cae039cbe513b7998e067f4f3958af2ec65ed1a) (From OE-Core rev: f0017a7b8b3fc4407e6596156b57aa1183937382) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Fix CVE-2017-9049 and CVE-2017-9050

2017-07-27T21:36:44+00:00

Fix handling of parameter-entity references There were two bugs where parameter-entity references could lead to an unexpected change of the input buffer in xmlParseNameComplex and xmlDictLookup being called with an invalid pointer. Fixes bug 781205 and bug 781361 CVE: CVE-2017-9049 CVE-2017-9050 (From OE-Core rev: 2300762fef8fc8e3e56fb07fd4076c1deeba0a9b) (From OE-Core rev: a409c50a09b12caa434b2b06bdcfb6beba43f67f) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Fix CVE-2017-9047 and CVE-2017-9048

2017-07-27T21:36:44+00:00

xmlSnprintfElementContent failed to correctly check the available buffer space in two locations. Fixes bug 781333 and bug 781701 CVE: CVE-2017-9047 CVE-2017-9048 (From OE-Core rev: bb0af023e811907b4e641b39f654ca921ac8794a) (From OE-Core rev: d549b8f3836b2ffda5c59a7ae4d955846c558646) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Avoid reparsing and simplify control flow in xmlParseStartTag2

2017-07-27T21:36:43+00:00

(From OE-Core rev: 4651afdd457eca06da07331186bf28b98df2eeff) (From OE-Core rev: 41a5ea683cca3e635565a7a289ba260addfe4b11) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Disable LeakSanitizer when running API tests

2017-07-27T21:36:43+00:00

Makefile.am: Disable LeakSanitizer when running API tests The autogenerated API tests leak memory. Upstream-Status: Backported - [https://git.gnome.org/browse/libxml2/commit/?id=ac9a4560ee85b18811ff8ab7791ddfff7b144b0a] (From OE-Core rev: e3985be0ddb40e8db44422092c875a4e373a6da3) (From OE-Core rev: 008b4d1c80012dc69da2866a2d26bd1d2b736e6f) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie