[OE-core] [PATCH][pyro] connman: Fix for CVE-2017-12865

Richard Purdie richard.purdie at linuxfoundation.org
Wed Aug 30 10:14:57 UTC 2017


On Wed, 2017-08-30 at 12:10 +0200, Sona Sarmadi wrote:
> dnsproxy: Fix crash on malformed DNS response
> If the response query string is malformed, we might access memory
> pass the end of "name" variable in parse_response().
> 
> [YOCTO #11959]
> 
> (From OE-Core rev: fb3e30e45eea2042fdb0b667cbc2c79ae3f5a1a9)
> 
> Signed-off-by: Sona Sarmadi <sona.sarmadi at enea.com>
> Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
> Signed-off-by: Sona Sarmadi <sona.sarmadi at enea.com>

Thanks, I merged this to pyro.

Cheers,

Richard



More information about the Openembedded-core mailing list