kumquat-buildroot/package/slirp/slirp.mk
Peter Korsgaard 282fc60ed4 package/slirp: add upstream security fix for CVE-2020-29129 / CVE-2020-29130
While processing ARP/NCSI packets in 'arp_input' or 'ncsi_input'
routines, ensure that pkt_len is large enough to accommodate the
respective protocol headers, lest it should do an OOB access.
Add check to avoid it.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-11-28 08:53:57 +01:00

21 lines
698 B
Makefile

################################################################################
#
# slirp
#
################################################################################
SLIRP_VERSION = 4.3.1
SLIRP_SOURCE = libslirp-$(SLIRP_VERSION).tar.xz
# Other "official" tarballs don't ship .tarball-version resulting in a build
# failure: https://gitlab.freedesktop.org/slirp/libslirp/-/issues/24
SLIRP_SITE = https://elmarco.fedorapeople.org
SLIRP_LICENSE = BSD-3-Clause
SLIRP_LICENSE_FILES = COPYRIGHT
SLIRP_INSTALL_STAGING = YES
SLIRP_DEPENDENCIES = libglib2
# 0001-slirp-check-pkt_len-before-reading-protocol-header.patch
SLIRP_IGNORE_CVES += CVE-2020-29129 CVE-2020-29130
$(eval $(meson-package))