diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2016-12-19 14:13:24 +0100 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2016-12-19 22:28:46 +0100 |
| commit | c489cbad775380b4c7586574e3dae8dc67ee9087 (patch) | |
| tree | e2cd26f809a43b9590dfe58343c11de26bb0ae86 /package/python-cryptography | |
| parent | 9d1dab1b80ae5b0851e29b9273e248d966ad8637 (diff) | |
| download | buildroot-c489cbad775380b4c7586574e3dae8dc67ee9087.tar.gz buildroot-c489cbad775380b4c7586574e3dae8dc67ee9087.zip | |
libupnp: add upstream security fix for CVE-2016-8863
Fix out-of-bound access in create_url_list()
If there is an invalid URL in URLS->buf after a valid one, uri_parse is
called with out pointing after the allocated memory. As uri_parse writes
to *out before returning an error the loop in create_url_list must be
stopped early to prevent an out-of-bound access.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/python-cryptography')
0 files changed, 0 insertions, 0 deletions
