kumquat-buildroot/package/libupnp
Peter Korsgaard c489cbad77 libupnp: add upstream security fix for CVE-2016-8863
Fix out-of-bound access in create_url_list()

If there is an invalid URL in URLS->buf after a valid one, uri_parse is
called with out pointing after the allocated memory. As uri_parse writes
to *out before returning an error the loop in create_url_list must be
stopped early to prevent an out-of-bound access.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-12-19 22:28:46 +01:00
..
0001-Don-t-allow-unhandled-POSTs-to-write-to-the-filesyst.patch
0002-Fix-out-of-bound-access-in-create_url_list-CVE-2016-.patch
Config.in
libupnp.hash
libupnp.mk