bf2e459bb9
Fix CVE-2022-26495: In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages. Fix CVE-2022-26496: In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name. https://github.com/NetworkBlockDevice/nbd/compare/nbd-3.21...nbd-3.24 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
40 lines
1.1 KiB
Makefile
40 lines
1.1 KiB
Makefile
################################################################################
|
|
#
|
|
# nbd
|
|
#
|
|
################################################################################
|
|
|
|
NBD_VERSION = 3.24
|
|
NBD_SOURCE = nbd-$(NBD_VERSION).tar.xz
|
|
NBD_SITE = http://downloads.sourceforge.net/project/nbd/nbd/$(NBD_VERSION)
|
|
NBD_CONF_OPTS = --enable-lfs
|
|
NBD_DEPENDENCIES = host-pkgconf libglib2
|
|
NBD_LICENSE = GPL-2.0
|
|
NBD_LICENSE_FILES = COPYING
|
|
NBD_CPE_ID_VENDOR = network_block_device_project
|
|
NBD_CPE_ID_PRODUCT = network_block_device
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_USES_UCLIBC),y)
|
|
# We have linux/falloc.h
|
|
# but uClibc lacks fallocate(2) which is a glibc-ism
|
|
NBD_CONF_ENV = ac_cv_header_linux_falloc_h=no
|
|
endif
|
|
|
|
ifneq ($(BR2_PACKAGE_NBD_CLIENT),y)
|
|
NBD_TOREMOVE += /usr/sbin/nbd-client
|
|
endif
|
|
ifneq ($(BR2_PACKAGE_NBD_SERVER),y)
|
|
NBD_TOREMOVE += /usr/bin/nbd-server
|
|
endif
|
|
ifneq ($(BR2_PACKAGE_NBD_TRDUMP),y)
|
|
NBD_TOREMOVE += /usr/bin/nbd-trdump
|
|
endif
|
|
|
|
define NBD_CLEANUP_AFTER_INSTALL
|
|
rm -f $(addprefix $(TARGET_DIR), $(NBD_TOREMOVE))
|
|
endef
|
|
|
|
NBD_POST_INSTALL_TARGET_HOOKS += NBD_CLEANUP_AFTER_INSTALL
|
|
|
|
$(eval $(autotools-package))
|