summaryrefslogtreecommitdiffstats
path: root/meta
diff options
context:
space:
mode:
authorDavide Gardenal <davidegarde2000@gmail.com>2022-05-31 10:26:03 +0200
committerRichard Purdie <richard.purdie@linuxfoundation.org>2022-06-07 11:53:26 +0100
commit8de0650a97e09825b9dfcfb6026f510bfa9080df (patch)
tree7009b905d369a63d84af14e8bf8c2c1a61af6643 /meta
parentd1b92a322a8b40b79869cb7fed385d67bc6b9f07 (diff)
downloadpoky-8de0650a97e09825b9dfcfb6026f510bfa9080df.tar.gz
libpcre2: upgrade 10.39 -> 10.40
Security fixes and update to Unicode property handling. Upstream release notes: https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.40 CVE: CVE-2022-1587 (From OE-Core rev: 9cf49b4f07afcf48a5e6d1ed12d0959d5d040e00) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
-rw-r--r--meta/recipes-support/libpcre/libpcre2/CVE-2022-1586.patch58
-rw-r--r--meta/recipes-support/libpcre/libpcre2_10.40.bb (renamed from meta/recipes-support/libpcre/libpcre2_10.39.bb)5
2 files changed, 2 insertions, 61 deletions
diff --git a/meta/recipes-support/libpcre/libpcre2/CVE-2022-1586.patch b/meta/recipes-support/libpcre/libpcre2/CVE-2022-1586.patch
deleted file mode 100644
index 10d88d7b73..0000000000
--- a/meta/recipes-support/libpcre/libpcre2/CVE-2022-1586.patch
+++ /dev/null
@@ -1,58 +0,0 @@
1From e881ed5028622959cf8859c053501fb1b16387f1 Mon Sep 17 00:00:00 2001
2From: Hitendra Prajapati <hprajapati@mvista.com>
3Date: Mon, 23 May 2022 13:52:39 +0530
4Subject: [PATCH] CVE-2022-1586
5
6Upstream-Status: Backport from https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a
7
8Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
9---
10 ChangeLog | 3 +++
11 src/pcre2_jit_compile.c | 2 +-
12 src/pcre2_jit_test.c | 3 +++
13 3 files changed, 7 insertions(+), 1 deletion(-)
14
15diff --git a/ChangeLog b/ChangeLog
16index d27542d..cd3da65 100644
17--- a/ChangeLog
18+++ b/ChangeLog
19@@ -63,6 +63,9 @@ Version 10.39 29-October-2021
20
21 Reformat slightly to make it C89 compatible again.
22
23+23. Fixed a unicode properrty matching issue in JIT. The character was not
24+fully read in caseless matching.
25+
26
27 Version 10.38 01-October-2021
28 -----------------------------
29diff --git a/src/pcre2_jit_compile.c b/src/pcre2_jit_compile.c
30index db2ce65..5baca9b 100644
31--- a/src/pcre2_jit_compile.c
32+++ b/src/pcre2_jit_compile.c
33@@ -7473,7 +7473,7 @@ while (*cc != XCL_END)
34 {
35 SLJIT_ASSERT(*cc == XCL_PROP || *cc == XCL_NOTPROP);
36 cc++;
37- if (*cc == PT_CLIST)
38+ if (*cc == PT_CLIST && *cc == XCL_PROP)
39 {
40 other_cases = PRIV(ucd_caseless_sets) + cc[1];
41 while (*other_cases != NOTACHAR)
42diff --git a/src/pcre2_jit_test.c b/src/pcre2_jit_test.c
43index 8dee16e..7bb307e 100644
44--- a/src/pcre2_jit_test.c
45+++ b/src/pcre2_jit_test.c
46@@ -412,6 +412,9 @@ static struct regression_test_case regression_test_cases[] = {
47 { MUP, A, 0, 0 | F_PROPERTY, "[\\P{L&}]{2}[^\xc2\x85-\xc2\x89\\p{Ll}\\p{Lu}]{2}", "\xc3\xa9\xe6\x92\xad.a\xe6\x92\xad|\xc2\x8a#" },
48 { PCRE2_UCP, 0, 0, 0 | F_PROPERTY, "[a-b\\s]{2,5}[^a]", "AB baaa" },
49 { MUP, 0, 0, 0 | F_NOMATCH, "[^\\p{Hangul}\\p{Z}]", " " },
50+ { MUP, 0, 0, 0, "[\\p{Lu}\\P{Latin}]+", "c\xEA\xA4\xAE,A,b" },
51+ { MUP, 0, 0, 0, "[\\x{a92e}\\p{Lu}\\P{Latin}]+", "c\xEA\xA4\xAE,A,b" },
52+ { CMUP, 0, 0, 0, "[^S]\\B", "\xe2\x80\x8a" },
53
54 /* Possible empty brackets. */
55 { MU, A, 0, 0, "(?:|ab||bc|a)+d", "abcxabcabd" },
56--
572.35.3
58
diff --git a/meta/recipes-support/libpcre/libpcre2_10.39.bb b/meta/recipes-support/libpcre/libpcre2_10.40.bb
index 36c51d700a..3843d43b69 100644
--- a/meta/recipes-support/libpcre/libpcre2_10.39.bb
+++ b/meta/recipes-support/libpcre/libpcre2_10.40.bb
@@ -8,14 +8,13 @@ SUMMARY = "Perl Compatible Regular Expressions version 2"
8HOMEPAGE = "http://www.pcre.org" 8HOMEPAGE = "http://www.pcre.org"
9SECTION = "devel" 9SECTION = "devel"
10LICENSE = "BSD-3-Clause" 10LICENSE = "BSD-3-Clause"
11LIC_FILES_CHKSUM = "file://LICENCE;md5=43cfa999260dd853cd6cb174dc396f3d" 11LIC_FILES_CHKSUM = "file://LICENCE;md5=41bfb977e4933c506588724ce69bf5d2"
12 12
13SRC_URI = "https://github.com/PhilipHazel/pcre2/releases/download/pcre2-${PV}/pcre2-${PV}.tar.bz2 \ 13SRC_URI = "https://github.com/PhilipHazel/pcre2/releases/download/pcre2-${PV}/pcre2-${PV}.tar.bz2 \
14 file://CVE-2022-1586.patch \
15" 14"
16UPSTREAM_CHECK_URI = "https://github.com/PhilipHazel/pcre2/releases" 15UPSTREAM_CHECK_URI = "https://github.com/PhilipHazel/pcre2/releases"
17 16
18SRC_URI[sha256sum] = "0f03caf57f81d9ff362ac28cd389c055ec2bf0678d277349a1a4bee00ad6d440" 17SRC_URI[sha256sum] = "14e4b83c4783933dc17e964318e6324f7cae1bc75d8f3c79bc6969f00c159d68"
19 18
20CVE_PRODUCT = "pcre2" 19CVE_PRODUCT = "pcre2"
21 20