Complete Yocto mirror with license table for TQMa6UL (2038-compliance)
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
This commit is contained in:
@@ -0,0 +1,28 @@
|
||||
Integer overflow in src/zm.c:zsdata() causes crash in sz and can leak information to receiver.
|
||||
|
||||
Patch taken from Fedora.
|
||||
|
||||
CVE: CVE-2018-10195
|
||||
Upstream-Status: Inappropriate (dead upstream)
|
||||
Signed-off-by: Ross Burton <ross.burton@intel.com>
|
||||
|
||||
diff -urN lrzsz-0.12.20/src/zm.c lrzsz-0.12.20.new/src/zm.c
|
||||
--- lrzsz-0.12.20/src/zm.c Tue Dec 29 09:48:38 1998
|
||||
+++ lrzsz-0.12.20.new/src/zm.c Tue Oct 8 12:46:58 2002
|
||||
@@ -431,10 +431,12 @@
|
||||
VPRINTF(3,("zsdata: %lu %s", (unsigned long) length,
|
||||
Zendnames[(frameend-ZCRCE)&3]));
|
||||
crc = 0;
|
||||
- do {
|
||||
- zsendline(*buf); crc = updcrc((0377 & *buf), crc);
|
||||
- buf++;
|
||||
- } while (--length>0);
|
||||
+
|
||||
+ for( ; length; length--) {
|
||||
+ zsendline(*buf); crc = updcrc((0377 & *buf), crc);
|
||||
+ buf++;
|
||||
+ }
|
||||
+
|
||||
xsendline(ZDLE); xsendline(frameend);
|
||||
crc = updcrc(frameend, crc);
|
||||
|
||||
Reference in New Issue
Block a user