diff options
-rw-r--r-- | meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch | 23 | ||||
-rw-r--r-- | meta-oe/recipes-devtools/giflib/giflib_5.2.1.bb (renamed from meta-oe/recipes-devtools/giflib/giflib_5.1.4.bb) | 18 |
2 files changed, 9 insertions, 32 deletions
diff --git a/meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch b/meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch deleted file mode 100644 index 9957be82f3..0000000000 --- a/meta-oe/recipes-devtools/giflib/files/CVE-2019-15133.patch +++ /dev/null | |||
@@ -1,23 +0,0 @@ | |||
1 | From 799eb6a3af8a3dd81e2429bf11a72a57e541f908 Mon Sep 17 00:00:00 2001 | ||
2 | From: "Eric S. Raymond" <esr@thyrsus.com> | ||
3 | Date: Sun, 17 Mar 2019 12:37:21 -0400 | ||
4 | Subject: [PATCH] Address SF bug #119: MemorySanitizer: FPE on unknown address | ||
5 | |||
6 | --- | ||
7 | dgif_lib.c | 2 +- | ||
8 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
9 | |||
10 | Upstream-status: Backport [https://sourceforge.net/p/giflib/code/ci/799eb6a3af8a3dd81e2429bf11a72a57e541f908/] | ||
11 | CVE: CVE-2019-15133 | ||
12 | |||
13 | --- a/lib/dgif_lib.c 2021-01-13 19:28:18.923493586 +0100 | ||
14 | +++ b/lib/dgif_lib.c 2021-01-13 19:28:55.245863085 +0100 | ||
15 | @@ -1099,7 +1099,7 @@ DGifSlurp(GifFileType *GifFile) | ||
16 | |||
17 | sp = &GifFile->SavedImages[GifFile->ImageCount - 1]; | ||
18 | /* Allocate memory for the image */ | ||
19 | - if (sp->ImageDesc.Width < 0 && sp->ImageDesc.Height < 0 && | ||
20 | + if (sp->ImageDesc.Width <= 0 && sp->ImageDesc.Height <= 0 && | ||
21 | sp->ImageDesc.Width > (INT_MAX / sp->ImageDesc.Height)) { | ||
22 | return GIF_ERROR; | ||
23 | } | ||
diff --git a/meta-oe/recipes-devtools/giflib/giflib_5.1.4.bb b/meta-oe/recipes-devtools/giflib/giflib_5.2.1.bb index 1871bab46e..105c53eab7 100644 --- a/meta-oe/recipes-devtools/giflib/giflib_5.1.4.bb +++ b/meta-oe/recipes-devtools/giflib/giflib_5.2.1.bb | |||
@@ -3,14 +3,17 @@ SECTION = "libs" | |||
3 | LICENSE = "MIT" | 3 | LICENSE = "MIT" |
4 | LIC_FILES_CHKSUM = "file://COPYING;md5=ae11c61b04b2917be39b11f78d71519a" | 4 | LIC_FILES_CHKSUM = "file://COPYING;md5=ae11c61b04b2917be39b11f78d71519a" |
5 | 5 | ||
6 | SRC_URI = " \ | ||
7 | ${SOURCEFORGE_MIRROR}/giflib/${BP}.tar.bz2 \ | ||
8 | file://CVE-2019-15133.patch \ | ||
9 | " | ||
10 | |||
11 | CVE_PRODUCT = "giflib_project:giflib" | 6 | CVE_PRODUCT = "giflib_project:giflib" |
12 | 7 | ||
13 | inherit autotools | 8 | DEPENDS = "xmlto-native" |
9 | |||
10 | SRC_URI = "${SOURCEFORGE_MIRROR}/giflib/${BP}.tar.gz" | ||
11 | SRC_URI[sha256sum] = "31da5562f44c5f15d63340a09a4fd62b48c45620cd302f77a6d9acf0077879bd" | ||
12 | |||
13 | do_install() { | ||
14 | # using autotools's default will end up in /usr/local | ||
15 | oe_runmake DESTDIR=${D} PREFIX=${prefix} LIBDIR=${libdir} install | ||
16 | } | ||
14 | 17 | ||
15 | PACKAGES += "${PN}-utils" | 18 | PACKAGES += "${PN}-utils" |
16 | FILES_${PN} = "${libdir}/libgif.so.*" | 19 | FILES_${PN} = "${libdir}/libgif.so.*" |
@@ -19,6 +22,3 @@ FILES_${PN}-utils = "${bindir}" | |||
19 | BBCLASSEXTEND = "native" | 22 | BBCLASSEXTEND = "native" |
20 | 23 | ||
21 | RDEPENDS_${PN}-utils = "perl" | 24 | RDEPENDS_${PN}-utils = "perl" |
22 | |||
23 | SRC_URI[md5sum] = "2c171ced93c0e83bb09e6ccad8e3ba2b" | ||
24 | SRC_URI[sha256sum] = "df27ec3ff24671f80b29e6ab1c4971059c14ac3db95406884fc26574631ba8d5" | ||