diff options
| -rw-r--r-- | meta/recipes-connectivity/openssl/openssl/CVE-2016-7055.patch | 43 | ||||
| -rw-r--r-- | meta/recipes-connectivity/openssl/openssl_1.0.2k.bb (renamed from meta/recipes-connectivity/openssl/openssl_1.0.2j.bb) | 5 |
2 files changed, 2 insertions, 46 deletions
diff --git a/meta/recipes-connectivity/openssl/openssl/CVE-2016-7055.patch b/meta/recipes-connectivity/openssl/openssl/CVE-2016-7055.patch deleted file mode 100644 index 83a74cdacb..0000000000 --- a/meta/recipes-connectivity/openssl/openssl/CVE-2016-7055.patch +++ /dev/null | |||
| @@ -1,43 +0,0 @@ | |||
| 1 | From 57c4b9f6a2f800b41ce2836986fe33640f6c3f8a Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Andy Polyakov <appro@openssl.org> | ||
| 3 | Date: Sun, 6 Nov 2016 18:33:17 +0100 | ||
| 4 | Subject: [PATCH] bn/asm/x86_64-mont.pl: fix for CVE-2016-7055 (Low severity). | ||
| 5 | |||
| 6 | Reviewed-by: Rich Salz <rsalz@openssl.org> | ||
| 7 | (cherry picked from commit 2fac86d9abeaa643677d1ffd0a139239fdf9406a) | ||
| 8 | |||
| 9 | Upstream-Status: Backport [https://github.com/openssl/openssl/commit/57c4b9f6a2f800b41ce2836986fe33640f6c3f8a] | ||
| 10 | CVE: CVE-2016-7055 | ||
| 11 | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> | ||
| 12 | --- | ||
| 13 | crypto/bn/asm/x86_64-mont.pl | 5 ++--- | ||
| 14 | 1 file changed, 2 insertions(+), 3 deletions(-) | ||
| 15 | |||
| 16 | diff --git a/crypto/bn/asm/x86_64-mont.pl b/crypto/bn/asm/x86_64-mont.pl | ||
| 17 | index 044fd7e..80492d8 100755 | ||
| 18 | --- a/crypto/bn/asm/x86_64-mont.pl | ||
| 19 | +++ b/crypto/bn/asm/x86_64-mont.pl | ||
| 20 | @@ -1148,18 +1148,17 @@ $code.=<<___; | ||
| 21 | mulx 2*8($aptr),%r15,%r13 # ... | ||
| 22 | adox -3*8($tptr),%r11 | ||
| 23 | adcx %r15,%r12 | ||
| 24 | - adox $zero,%r12 | ||
| 25 | + adox -2*8($tptr),%r12 | ||
| 26 | adcx $zero,%r13 | ||
| 27 | + adox $zero,%r13 | ||
| 28 | |||
| 29 | mov $bptr,8(%rsp) # off-load &b[i] | ||
| 30 | - .byte 0x67 | ||
| 31 | mov $mi,%r15 | ||
| 32 | imulq 24(%rsp),$mi # "t[0]"*n0 | ||
| 33 | xor %ebp,%ebp # xor $zero,$zero # cf=0, of=0 | ||
| 34 | |||
| 35 | mulx 3*8($aptr),%rax,%r14 | ||
| 36 | mov $mi,%rdx | ||
| 37 | - adox -2*8($tptr),%r12 | ||
| 38 | adcx %rax,%r13 | ||
| 39 | adox -1*8($tptr),%r13 | ||
| 40 | adcx $zero,%r14 | ||
| 41 | -- | ||
| 42 | 2.7.4 | ||
| 43 | |||
diff --git a/meta/recipes-connectivity/openssl/openssl_1.0.2j.bb b/meta/recipes-connectivity/openssl/openssl_1.0.2k.bb index 94672f90bc..1973f81a24 100644 --- a/meta/recipes-connectivity/openssl/openssl_1.0.2j.bb +++ b/meta/recipes-connectivity/openssl/openssl_1.0.2k.bb | |||
| @@ -41,10 +41,9 @@ SRC_URI += "file://find.pl;subdir=${BP}/util/ \ | |||
| 41 | file://configure-musl-target.patch \ | 41 | file://configure-musl-target.patch \ |
| 42 | file://parallel.patch \ | 42 | file://parallel.patch \ |
| 43 | file://openssl-util-perlpath.pl-cwd.patch \ | 43 | file://openssl-util-perlpath.pl-cwd.patch \ |
| 44 | file://CVE-2016-7055.patch \ | ||
| 45 | " | 44 | " |
| 46 | SRC_URI[md5sum] = "96322138f0b69e61b7212bc53d5e912b" | 45 | SRC_URI[md5sum] = "f965fc0bf01bf882b31314b61391ae65" |
| 47 | SRC_URI[sha256sum] = "e7aff292be21c259c6af26469c7a9b3ba26e9abaaffd325e3dccc9785256c431" | 46 | SRC_URI[sha256sum] = "6b3977c61f2aedf0f96367dcfb5c6e578cf37e7b8d913b4ecb6643c3cb88d8c0" |
| 48 | 47 | ||
| 49 | PACKAGES =+ "${PN}-engines" | 48 | PACKAGES =+ "${PN}-engines" |
| 50 | FILES_${PN}-engines = "${libdir}/ssl/engines/*.so ${libdir}/engines" | 49 | FILES_${PN}-engines = "${libdir}/ssl/engines/*.so ${libdir}/engines" |
