rpi/domo
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Bump Buildroot Version to buildroot 2019_02_6

Browse Source
This commit is contained in:
NADAL Jean-Baptiste
2019-10-25 11:46:00 +02:00
parent e07322a5a8
commit c1075f68da
549 changed files with 6692 additions and 4165 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
bsp/buildroot/package/gstreamer1/gst1-plugins-bad/Config.in
View File

@@ -332,11 +332,12 @@ config BR2_PACKAGE_GST1_PLUGINS_BAD_PLUGIN_DASH
config BR2_PACKAGE_GST1_PLUGINS_BAD_PLUGIN_DECKLINK
bool "decklink"
depends on BR2_INSTALL_LIBSTDCPP
depends on !BR2_STATIC_LIBS # <dlfcn.h>
help
Blackmagic Decklink plugin
comment "decklink needs a toolchain w/ C++"
depends on !BR2_INSTALL_LIBSTDCPP
comment "decklink needs a toolchain w/ C++, dynamic library"
depends on !BR2_INSTALL_LIBSTDCPP || BR2_STATIC_LIBS
config BR2_PACKAGE_GST1_PLUGINS_BAD_PLUGIN_DIRECTFB
bool "directfb"

31
bsp/buildroot/package/gstreamer1/gst1-plugins-base/0001-gstrtspconnection-Security-loophole-making-heap-over.patch Normal file
View File

@@ -0,0 +1,31 @@
From f672277509705c4034bc92a141eefee4524d15aa Mon Sep 17 00:00:00 2001
From: Tobias Ronge <tobiasr@axis.com>
Date: Thu, 14 Mar 2019 10:12:27 +0100
Subject: [PATCH] gstrtspconnection: Security loophole making heap overflow
The former code allowed an attacker to create a heap overflow by
sending a longer than allowed session id in a response and including a
semicolon to change the maximum length. With this change, the parser
will never go beyond 512 bytes.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
gst-libs/gst/rtsp/gstrtspconnection.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/gst-libs/gst/rtsp/gstrtspconnection.c b/gst-libs/gst/rtsp/gstrtspconnection.c
index a6755bedd..c0429064a 100644
--- a/gst-libs/gst/rtsp/gstrtspconnection.c
+++ b/gst-libs/gst/rtsp/gstrtspconnection.c
@@ -2461,7 +2461,7 @@ build_next (GstRTSPBuilder * builder, GstRTSPMessage * message,
maxlen = sizeof (conn->session_id) - 1;
/* the sessionid can have attributes marked with ;
* Make sure we strip them */
- for (i = 0; session_id[i] != '\0'; i++) {
+ for (i = 0; i < maxlen && session_id[i] != '\0'; i++) {
if (session_id[i] == ';') {
maxlen = i;
/* parse timeout */
--
2.11.0

3
bsp/buildroot/package/gstreamer1/gst1-rtsp-server/gst1-rtsp-server.mk
View File

@@ -15,6 +15,9 @@ GST1_RTSP_SERVER_DEPENDENCIES = \
gstreamer1 \
gst1-plugins-base \
gst1-plugins-good
GST1_RTSP_SERVER_CONF_OPTS = \
--disable-examples \
--disable-tests
ifeq ($(BR2_PACKAGE_LIBCGROUP),y)
GST1_RTSP_SERVER_DEPENDENCIES += libcgroup