Skip to content
Snippets Groups Projects
Commit d18f3004 authored by Stefan Schmidt's avatar Stefan Schmidt
Browse files

wpantund: bump SRCREV to include security patch we carried locally


This project is pretty inactive and the bump to HEAD does only include
two patches. The security fix we already carried localy and a
documentation update without any impact on the code.

Signed-off-by: default avatarStefan Schmidt <stefan.schmidt@huawei.com>
parent 11750c01
No related branches found
No related tags found
No related merge requests found
CVE: CVE-2021-33889
Upstream-Status: Submitted [https://github.com/openthread/wpantund/pull/503]
Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>
From 2b6f6c54bba3ab397f0e83f9d5e9faee905ac559 Mon Sep 17 00:00:00 2001
From: dot11monk <mitisgod@gmail.com>
Date: Mon, 28 Jun 2021 10:31:44 +0530
Subject: [PATCH] Fixed stack-buffer-overflow in metric_len
---
src/ncp-spinel/SpinelNCPInstance.cpp | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/ncp-spinel/SpinelNCPInstance.cpp b/src/ncp-spinel/SpinelNCPInstance.cpp
index e6d68ad..fee0f0a 100644
--- a/src/ncp-spinel/SpinelNCPInstance.cpp
+++ b/src/ncp-spinel/SpinelNCPInstance.cpp
@@ -2177,7 +2177,7 @@ unpack_link_metrics_as_val_map(const uint8_t *data_in, spinel_size_t data_len, V
spinel_ssize_t len;
uint8_t metric_type;
uint8_t *metric_ptr = NULL;
- uint16_t metric_len = 0;
+ uint32_t metric_len = 0;
int ret = kWPANTUNDStatus_Failure;
while (data_len > 0) {
--
2.31.1
......@@ -14,14 +14,13 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=e7820bc7f7d1638a6b54fc2e8d7fb103 \
"
SRC_URI = "gitsm://github.com/openthread/wpantund.git;protocol=https;branch=master \
file://CVE-2021-33889.patch \
"
# CVE-2020-8916 has been fixed in commit
# 3f108441e23e033b936e85be5b6877dd0a1fbf1c which is included in the SRCREV
CVE_CHECK_IGNORE = "CVE-2020-8916"
PV = "0.07.01+git${SRCPV}"
SRCREV = "bf45115f41ba2b8029eda174be2b93dea73b9261"
SRCREV = "0fb1f57e4224e2df3e630e146702bfcf63fbf07a"
S = "${WORKDIR}/git"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment