16accb6b24
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
33 lines
929 B
Diff
33 lines
929 B
Diff
From 589b0691e59f761ccb05ddb8e1124991440db2c7 Mon Sep 17 00:00:00 2001
|
|
From: Andrew Tridgell <andrew@tridgell.net>
|
|
Date: Thu, 14 Nov 2024 09:57:08 +1100
|
|
Subject: [PATCH] prevent information leak off the stack
|
|
|
|
prevent leak of uninitialised stack data in hash_search
|
|
|
|
CVE: CVE-2024-12085
|
|
|
|
Upstream-Status: Backport [https://git.samba.org/?p=rsync.git;a=commit;h=589b0691e59f761ccb05ddb8e1124991440db2c7]
|
|
|
|
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
|
|
---
|
|
match.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/match.c b/match.c
|
|
index 36e78ed2..dfd6af2c 100644
|
|
--- a/match.c
|
|
+++ b/match.c
|
|
@@ -147,6 +147,9 @@ static void hash_search(int f,struct sum_struct *s,
|
|
int more;
|
|
schar *map;
|
|
|
|
+ // prevent possible memory leaks
|
|
+ memset(sum2, 0, sizeof sum2);
|
|
+
|
|
/* want_i is used to encourage adjacent matches, allowing the RLL
|
|
* coding of the output to work more efficiently. */
|
|
want_i = 0;
|
|
--
|
|
2.40.0
|