[oe-commits] Yue Tao : libsndfile: Security Advisory - libsndfile - CVE-2014-9496

[git at git.openembedded.org]

Module: openembedded-core.git
Branch: dizzy
Commit: e2fdc340c109bd64b1520443b27bd42a0faef0e0
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=e2fdc340c109bd64b1520443b27bd42a0faef0e0

Author: Yue Tao <Yue.Tao at windriver.com>
Date:   Fri Jun  5 15:48:15 2015 +0800

libsndfile: Security Advisory - libsndfile - CVE-2014-9496

Backport two commits from libsndfile upstream to fix a segfault and
two potential buffer overflows.

Signed-off-by: Yue Tao <Yue.Tao at windriver.com>
Signed-off-by: Armin Kuster <akuster808 at gmail.com>

---

 ...src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch | 211 +++++++++++++++++++++
 ...c-Fix-two-potential-buffer-read-overflows.patch |  49 +++++
 .../libsndfile/libsndfile1_1.0.25.bb               |   5 +-
 3 files changed, 264 insertions(+), 1 deletion(-)

Diff:   http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=e2fdc340c109bd64b1520443b27bd42a0faef0e0