diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-01-08 05:54:20 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-01-18 06:21:02 -0800 |
| commit | 0c88d20540f0513c3d79d10f34132b2296ac246c (patch) | |
| tree | 246daee0e389be0f6fbe8910c19a1d5496f5eedb /scripts/pybootchartgui/pybootchartgui.py | |
| parent | f700dcdc1d7db04c126a42f1d8f9588ad295f09c (diff) | |
| download | poky-0c88d20540f0513c3d79d10f34132b2296ac246c.tar.gz | |
go: Fix CVE-2024-34156
Calling Decoder.Decode on a message which contains deeply nested structures can
cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-34156
Upstream-patch:
https://github.com/golang/go/commit/2092294f2b097c5828f4eace6c98a322c1510b01
(From OE-Core rev: 3aeeee86a53cee14bb1a6a485f8781459b6f2ffc)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/pybootchartgui/pybootchartgui.py')
0 files changed, 0 insertions, 0 deletions