16accb6b24
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
30 lines
936 B
Diff
30 lines
936 B
Diff
From dc5db30989f385303c79ec3188c52e33f6f5886e Mon Sep 17 00:00:00 2001
|
|
From: Ar Jun <pkillarjun@protonmail.com>
|
|
Date: Sat, 16 Nov 2024 11:50:09 -0600
|
|
Subject: [PATCH 1/2] Fix possible NULL deref in soup_uri_decode_data_uri
|
|
|
|
CVE: CVE-2025-32051
|
|
Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/commit/0713ba4a719da938dc8facc89fca99cd0aa3069f]
|
|
|
|
Signed-off-by: Changqing Li <changqing.li@windriver.com>
|
|
---
|
|
libsoup/soup-uri-utils.c | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/libsoup/soup-uri-utils.c b/libsoup/soup-uri-utils.c
|
|
index be2b79b..0251279 100644
|
|
--- a/libsoup/soup-uri-utils.c
|
|
+++ b/libsoup/soup-uri-utils.c
|
|
@@ -303,6 +303,8 @@ soup_uri_decode_data_uri (const char *uri,
|
|
|
|
uri_string = g_uri_to_string (soup_uri);
|
|
g_uri_unref (soup_uri);
|
|
+ if (!uri_string)
|
|
+ return NULL;
|
|
|
|
start = uri_string + 5;
|
|
comma = strchr (start, ',');
|
|
--
|
|
2.34.1
|
|
|