5dbebf3d35
Fix CVE-2020-26159: In Oniguruma 6.9.5_rev1, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
19 lines
558 B
Makefile
19 lines
558 B
Makefile
################################################################################
|
|
#
|
|
# oniguruma
|
|
#
|
|
################################################################################
|
|
|
|
ONIGURUMA_VERSION = 6.9.5
|
|
ONIGURUMA_SITE = \
|
|
https://github.com/kkos/oniguruma/releases/download/v$(ONIGURUMA_VERSION)
|
|
ONIGURUMA_SOURCE = onig-$(ONIGURUMA_VERSION).tar.gz
|
|
ONIGURUMA_LICENSE = BSD-2-Clause
|
|
ONIGURUMA_LICENSE_FILES = COPYING
|
|
ONIGURUMA_INSTALL_STAGING = YES
|
|
|
|
# 0001-207-Out-of-bounds-write.patch
|
|
ONIGURUMA_IGNORE_CVES += CVE-2020-26159
|
|
|
|
$(eval $(autotools-package))
|