mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-01-01 13:58:06 +00:00
iperf3: Fix CVE-2025-54350
remove assert to prevent crash due to assertion failure
on malformed authentication attempt
Reference: 4eab661da0
Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
parent
7b0f353128
commit
959b07135c
24
meta-oe/recipes-benchmark/iperf3/iperf3/CVE-2025-54350.patch
Normal file
24
meta-oe/recipes-benchmark/iperf3/iperf3/CVE-2025-54350.patch
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
Subject: [PATCH] iperf3: Fix CVE-2025-54350
|
||||
CVE: CVE-2025-54350
|
||||
Upstream-Status: Backport [https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a]
|
||||
Comment: Patch is refreshed as per codebase of 3.18
|
||||
Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
|
||||
---
|
||||
--- a/src/iperf_auth.c 2025-09-12 10:21:48.186090000 +0530
|
||||
+++ b/src/iperf_auth.c 2025-09-15 11:13:21.123222080 +0530
|
||||
@@ -28,7 +28,6 @@
|
||||
#include "iperf_config.h"
|
||||
|
||||
#include <string.h>
|
||||
-#include <assert.h>
|
||||
#include <time.h>
|
||||
#include <sys/types.h>
|
||||
/* FreeBSD needs _WITH_GETLINE to enable the getline() declaration */
|
||||
@@ -152,7 +151,6 @@
|
||||
|
||||
BIO_set_flags(bio, BIO_FLAGS_BASE64_NO_NL); //Do not use newlines to flush buffer
|
||||
*length = BIO_read(bio, *buffer, strlen(b64message));
|
||||
- assert(*length == decodeLen); //length should equal decodeLen, else something went horribly wrong
|
||||
BIO_free_all(bio);
|
||||
|
||||
return (0); //success
|
||||
|
|
@ -17,6 +17,7 @@ SRC_URI = "git://github.com/esnet/iperf.git;branch=master;protocol=https \
|
|||
file://0001-configure.ac-check-for-CPP-prog.patch \
|
||||
file://0001-fix-build-with-gcc-15.patch \
|
||||
file://CVE-2025-54349.patch \
|
||||
file://CVE-2025-54350.patch \
|
||||
"
|
||||
|
||||
SRCREV = "2a2984488d6de8f7a2d1f5938e03ca7be57e227c"
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user