Fixes the following security vulnerability:
- CVE-2019-18218: cdf_read_property_info in cdf.c in file through 5.37 does
not restrict the number of CDF_VECTOR elements, which allows a heap-based
buffer overflow (4-byte out-of-bounds write).
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit
|
||
---|---|---|
.. | ||
0001-Detect-multiplication-overflow-when-computing-sector.patch | ||
0002-Limit-the-number-of-elements-in-a-vector-found-by-os.patch | ||
Config.in | ||
file.hash | ||
file.mk |