diff options
| author | Robert Yang <liezhi.yang@windriver.com> | 2017-08-29 17:48:57 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-08-31 17:41:41 +0100 |
| commit | d5f2604669820d637fc77acab45dabfa60fc3440 (patch) | |
| tree | 088f247d22f2099b39c3539b093d023903e5929c /scripts/lib/scriptutils.py | |
| parent | 45f40ea5d904808c1b345ebfa3ccbf8db1ef1c96 (diff) | |
| download | poky-d5f2604669820d637fc77acab45dabfa60fc3440.tar.gz | |
libpcre2: Fix CVE-2017-7186
A fuzz on libpcre1 through the pcretest utility revealed an invalid read in the
library. For who is interested in a detailed description of the bug, will
follow a feedback from upstream:
This was a genuine bug in the 32-bit library. Thanks for finding it. The crash
was caused by trying to find a Unicode property for a code value greater than
0x10ffff, the Unicode maximum, when running in non-UTF mode (where character
values can be up to 0xffffffff).
(From OE-Core rev: 1b87201784e733f3a9d436f56cb5a6151ba6bdfa)
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/scriptutils.py')
0 files changed, 0 insertions, 0 deletions