update buildroot to 2017.02.11
This commit is contained in:
33
bsp/buildroot/package/libxml2/0001-CVE-2017-8872.patch
Normal file
33
bsp/buildroot/package/libxml2/0001-CVE-2017-8872.patch
Normal file
@@ -0,0 +1,33 @@
|
||||
From 8b329effb610f4138e4e680f6a6867570f6d6179 Mon Sep 17 00:00:00 2001
|
||||
From: Baruch Siach <baruch@tkos.co.il>
|
||||
Date: Fri, 9 Feb 2018 10:58:11 +0200
|
||||
Subject: [PATCH] CVE-2017-8872
|
||||
|
||||
Taken from attachment to upstream bug report comment #9.
|
||||
|
||||
https://bugzilla.gnome.org/show_bug.cgi?id=775200#c9
|
||||
https://bugzilla.gnome.org/attachment.cgi?id=366193&action=diff
|
||||
|
||||
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
|
||||
---
|
||||
parser.c | 4 ++++
|
||||
1 file changed, 4 insertions(+)
|
||||
|
||||
diff --git a/parser.c b/parser.c
|
||||
index 1c5e036ea265..025111067ae8 100644
|
||||
--- a/parser.c
|
||||
+++ b/parser.c
|
||||
@@ -12467,6 +12467,10 @@ xmlHaltParser(xmlParserCtxtPtr ctxt) {
|
||||
ctxt->input->cur = BAD_CAST"";
|
||||
ctxt->input->base = ctxt->input->cur;
|
||||
ctxt->input->end = ctxt->input->cur;
|
||||
+ if (ctxt->input->buf)
|
||||
+ xmlBufEmpty (ctxt->input->buf->buffer);
|
||||
+ else
|
||||
+ ctxt->input->length = 0;
|
||||
}
|
||||
}
|
||||
|
||||
--
|
||||
2.15.1
|
||||
|
||||
@@ -1,2 +1,4 @@
|
||||
# Locally calculated after checking pgp signature
|
||||
sha256 4031c1ecee9ce7ba4f313e91ef6284164885cdb69937a123f6a83bb6a72dcd38 libxml2-2.9.5.tar.gz
|
||||
sha256 f63c5e7d30362ed28b38bfa1ac6313f9a80230720b7fb6c80575eeab3ff5900c libxml2-2.9.7.tar.gz
|
||||
# License files, locally calculated
|
||||
sha256 c5c63674f8a83c4d2e385d96d1c670a03cb871ba2927755467017317878574bd COPYING
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
#
|
||||
################################################################################
|
||||
|
||||
LIBXML2_VERSION = 2.9.5
|
||||
LIBXML2_VERSION = 2.9.7
|
||||
LIBXML2_SITE = ftp://xmlsoft.org/libxml2
|
||||
LIBXML2_INSTALL_STAGING = YES
|
||||
LIBXML2_LICENSE = MIT
|
||||
|
||||
Reference in New Issue
Block a user