<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Hi Armin,</div>
<div> </div>
<div>I am trying to backport the following patch to bash in krogoth:</div>
<div><a href="https://ftp.gnu.org/pub/gnu/bash/bash-4.3-patches/bash43-047"><font color="#0563C1"><u>https://ftp.gnu.org/pub/gnu/bash/bash-4.3-patches/bash43-047</u></font></a> </div>
<div> </div>
<div>Reference to CVE assignment: <a href="http://openwall.com/lists/oss-security/2016/09/16/8"><font color="#0563C1"><u>http://openwall.com/lists/oss-security/2016/09/16/8</u></font></a></div>
<div> </div>
<div><font face="Courier New" size="2"><span style="font-size:10pt;">The patch can be applied with: `patch -p0' </span></font></div>
<div> </div>
<div>“patch –p0 < ~/security-patches/CVE-2016-0634.patch</div>
<div> </div>
<div>poky/build-qemuppc/tmp/work/ppc7400-enea-linux/bash/4.3.30-r0/bash-4.3.30# patch -p0 < CVE-2016-0634.patch</div>
<div>patching file parse.y</div>
<div>Hunk #1 succeeded at 5257 (offset -2 lines).</div>
<div>Hunk #2 succeeded at 5405 (offset -2 lines).</div>
<div>Hunk #3 succeeded at 5499 (offset -2 lines).</div>
<div>patching file y.tab.c</div>
<div>Hunk #1 succeeded at 7569 (offset -2 lines).</div>
<div>Hunk #2 succeeded at 7717 (offset -2 lines).</div>
<div>Hunk #3 succeeded at 7811 (offset -2 lines).</div>
<div><a href="mailto:root@sestofb10:/media/data/fb/hopo/6.0/poky/build-qemuppc/tmp/work/ppc7400-enea-linux/bash/4.3.30-r0/bash-4.3.30#"><font color="#0563C1"><u>root@sestofb10:/media/data/fb/hopo/6.0/poky/build-qemuppc/tmp/work/ppc7400-enea-linux/bash/4.3.30-r0/bash-4.3.30#</u></font></a></div>
<div> </div>
<div>But when I add it to the bash recipe and run bitbake I get error (I guess patch –p1 does not work). Do you know how can I solve this issue?</div>
<div>ERROR: bash-4.3.30-r0 do_patch: Command Error: 'quilt --quiltrc /data/fb/hopo/6.0/poky/build-qemuppc/tmp/sysroots/x86_64-linux/etc/quiltrc push' exited with 1 Output:</div>
<div>Applying patch CVE-2016-0634.patch</div>
<div>can't find file to patch at input line 25</div>
<div>Perhaps you used the wrong -p or --strip option?</div>
<div>The text leading up to this was:</div>
<div>--------------------------</div>
<div>|Bash-Release: 4.3</div>
<div>|Patch-ID: bash43-047</div>
<div>|</div>
<div>|Bug-Reported-by: Bernd Dietzel</div>
<div>|Bug-Reference-ID:</div>
<div>|Bug-Reference-URL: <a href="https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1507025">
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1507025</a></div>
<div>|</div>
<div>|Bug-Description:</div>
<div>|</div>
<div>|Bash performs word expansions on the prompt strings after the special</div>
<div>|escape sequences are expanded. If a malicious user can modify the system</div>
<div>|hostname or change the name of the bash executable and coerce a user into</div>
<div>|executing it, and the new name contains word expansions (including</div>
<div>|command substitution), bash will expand them in prompt strings containing</div>
<div>|the \h or \H and \s escape sequences, respectively.</div>
<div>|</div>
<div>|Patch (apply with `patch -p0')</div>
<div>|</div>
<div>|CVE: CVE-2016-0634</div>
<div>|Upstream-Status: Backport</div>
<div>|Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com></div>
<div>|</div>
<div>|*** ../bash-4.3-patched/parse.y 2015-08-13 15:11:54.000000000 -0400</div>
<div>|--- parse.y 2016-03-07 15:44:14.000000000 -0500</div>
<div>--------------------------</div>
<div>No file to patch. Skipping patch.</div>
<div>3 out of 3 hunks ignored</div>
<div>can't find file to patch at input line 82</div>
<div>Perhaps you used the wrong -p or --strip option?</div>
<div>The text leading up to this was:</div>
<div>--------------------------</div>
<div>|*** ../bash-4.3-patched/y.tab.c 2015-08-13 15:11:54.000000000 -0400</div>
<div>|--- y.tab.c 2016-03-07 15:44:14.000000000 -0500</div>
<div>--------------------------</div>
<div> </div>
<div> </div>
<div><font size="2"><span style="font-size:10.5pt;">Thanks</span></font></div>
<div><font size="2"><span style="font-size:10.5pt;">//Sona</span></font></div>
<div> </div>
<div> </div>
</span></font>
</body>
</html>