summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorZang Ruochen <zangrc.fnst@cn.fujitsu.com>2020-12-14 15:54:59 +0800
committerArmin Kuster <akuster808@gmail.com>2021-01-10 19:24:24 -0800
commitaaaf03ada11b7f0207c34bc5f72ffff942fee8b6 (patch)
tree3c044815d31067fc2d7182cbc02908b8bc91bdf1
parentc70dcb9bd1fb47b0b09afdc812cbd3aa3ad14bc9 (diff)
downloadmeta-openembedded-aaaf03ada11b7f0207c34bc5f72ffff942fee8b6.tar.gz
mcpp: Normalize the patch format of CVE
Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9301b77e3266160ffb7e9bfd69d445f0392076c8) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 81874b239287126805aa176907bd52e9a7801655) Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-oe/recipes-devtools/mcpp/files/CVE-2019-14274.patch34
-rw-r--r--meta-oe/recipes-devtools/mcpp/files/ice-mcpp.patch31
-rw-r--r--meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb3
3 files changed, 36 insertions, 32 deletions
diff --git a/meta-oe/recipes-devtools/mcpp/files/CVE-2019-14274.patch b/meta-oe/recipes-devtools/mcpp/files/CVE-2019-14274.patch
new file mode 100644
index 0000000000..a0c6584ecb
--- /dev/null
+++ b/meta-oe/recipes-devtools/mcpp/files/CVE-2019-14274.patch
@@ -0,0 +1,34 @@
1From ea453aca2742be6ac43ba4ce0da6f938a7e5a5d8 Mon Sep 17 00:00:00 2001
2From: He Liu <liulonnie@gmail.com>
3Date: Tue, 4 Feb 2014 11:00:40 -0800
4Subject: [PATCH] line comment bug
5
6---
7 src/support.c | 4 +++-
8 1 file changed, 3 insertions(+), 1 deletion(-)
9
10diff --git a/src/support.c b/src/support.c
11index c57eaef..e3357e4 100644
12--- a/src/support.c
13+++ b/src/support.c
14@@ -188,7 +188,7 @@ static char * append_to_buffer(
15 size_t length
16 )
17 {
18- if (mem_buf_p->bytes_avail < length) { /* Need to allocate more memory */
19+ if (mem_buf_p->bytes_avail < length + 1) { /* Need to allocate more memory */
20 size_t size = MAX( BUF_INCR_SIZE, length);
21
22 if (mem_buf_p->buffer == NULL) { /* 1st append */
23@@ -1722,6 +1722,8 @@ com_start:
24 sp -= 2;
25 while (*sp != '\n') /* Until end of line */
26 mcpp_fputc( *sp++, OUT);
27+ mcpp_fputc('\n', OUT);
28+ wrong_line = TRUE;
29 }
30 goto end_line;
31 default: /* Not a comment */
32--
332.25.1
34
diff --git a/meta-oe/recipes-devtools/mcpp/files/ice-mcpp.patch b/meta-oe/recipes-devtools/mcpp/files/ice-mcpp.patch
index 8103cf0920..1df3ae55bc 100644
--- a/meta-oe/recipes-devtools/mcpp/files/ice-mcpp.patch
+++ b/meta-oe/recipes-devtools/mcpp/files/ice-mcpp.patch
@@ -114,37 +114,6 @@ diff -r -c -N ../mcpp-2.7.2-old/src/main.c ./src/main.c
114 } 114 }
115 115
116 int mcpp_lib_main 116 int mcpp_lib_main
117diff -r -c -N ../mcpp-2.7.2-old/src/support.c ./src/support.c
118*** ../mcpp-2.7.2-old/src/support.c Tue Jun 10 06:02:33 2008
119--- ./src/support.c Fri May 14 12:40:56 2010
120***************
121*** 188,194 ****
122 size_t length
123 )
124 {
125! if (mem_buf_p->bytes_avail < length) { /* Need to allocate more memory */
126 size_t size = MAX( BUF_INCR_SIZE, length);
127
128 if (mem_buf_p->buffer == NULL) { /* 1st append */
129--- 188,194 ----
130 size_t length
131 )
132 {
133! if (mem_buf_p->bytes_avail < length + 1) { /* Need to allocate more memory */
134 size_t size = MAX( BUF_INCR_SIZE, length);
135
136 if (mem_buf_p->buffer == NULL) { /* 1st append */
137***************
138*** 1722,1727 ****
139--- 1722,1729 ----
140 sp -= 2;
141 while (*sp != '\n') /* Until end of line */
142 mcpp_fputc( *sp++, OUT);
143+ mcpp_fputc( '\n', OUT);
144+ wrong_line = TRUE;
145 }
146 goto end_line;
147 default: /* Not a comment */
148diff -r -c -N ../mcpp-2.7.2-old/src/system.c ./src/system.c 117diff -r -c -N ../mcpp-2.7.2-old/src/system.c ./src/system.c
149*** ../mcpp-2.7.2-old/src/system.c 2008-11-26 10:53:51.000000000 +0100 118*** ../mcpp-2.7.2-old/src/system.c 2008-11-26 10:53:51.000000000 +0100
150--- ./src/system.c 2011-02-21 16:18:05.678058106 +0100 119--- ./src/system.c 2011-02-21 16:18:05.678058106 +0100
diff --git a/meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb b/meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb
index b5ca495663..f8125f72d9 100644
--- a/meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb
+++ b/meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb
@@ -4,7 +4,8 @@ LICENSE = "BSD-2-Clause"
4LIC_FILES_CHKSUM = "file://LICENSE;md5=5ca370b75ec890321888a00cea9bc1d5" 4LIC_FILES_CHKSUM = "file://LICENSE;md5=5ca370b75ec890321888a00cea9bc1d5"
5 5
6SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}-${PV}.tar.gz \ 6SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}-${PV}.tar.gz \
7 file://ice-mcpp.patch " 7 file://ice-mcpp.patch \
8 file://CVE-2019-14274.patch"
8SRC_URI[md5sum] = "512de48c87ab023a69250edc7a0c7b05" 9SRC_URI[md5sum] = "512de48c87ab023a69250edc7a0c7b05"
9SRC_URI[sha256sum] = "3b9b4421888519876c4fc68ade324a3bbd81ceeb7092ecdbbc2055099fcb8864" 10SRC_URI[sha256sum] = "3b9b4421888519876c4fc68ade324a3bbd81ceeb7092ecdbbc2055099fcb8864"
10 11