summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2025-01-17 20:33:21 +0100
committerArmin Kuster <akuster808@gmail.com>2025-02-04 14:29:37 -0800
commit35b9a267502abf00fee66e8f32477a5c2abab9c6 (patch)
tree8bc36a2dffa847e2af4935bbac9bcd1b7dc0d4d8
parentc7d64c705976024bdb537a2cec33c9223777c0d8 (diff)
downloadmeta-openembedded-35b9a267502abf00fee66e8f32477a5c2abab9c6.tar.gz
audiofile: mark CVE-2020-18781 as patched
Per [1] this CVE is already patched by commit [2]. This can be also verified with yocto build. Running without this patch: root@qemux86-64:~# sfconvert poc.wav output format wave malloc(): corrupted top size Aborted Running with it: root@qemux86-64:~# sfconvert poc.wav output format wave Audio File Library: Bad number of coefficients [error 62] Could not open file 'poc.wav' for reading. [1] https://github.com/mpruett/audiofile/issues/56 [2] https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 68f55c158e15a5d35702ae5c730586001e487f86) Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch b/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
index 282f4c01b9..17a97163f5 100644
--- a/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
+++ b/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
@@ -17,6 +17,7 @@ CVE: CVE-2017-6832
17CVE: CVE-2017-6833 17CVE: CVE-2017-6833
18CVE: CVE-2017-6835 18CVE: CVE-2017-6835
19CVE: CVE-2017-6837 19CVE: CVE-2017-6837
20CVE: CVE-2020-18781
20Upstream-Status: Inactive-Upstream [lastrelease: 2013] 21Upstream-Status: Inactive-Upstream [lastrelease: 2013]
21Signed-off-by: Peter Marko <peter.marko@siemens.com> 22Signed-off-by: Peter Marko <peter.marko@siemens.com>
22--- 23---