meta-openembedded/meta-multimedia/recipes-connectivity
Andrej Valek b4659368a0 libupnp: Fix out-of-bound access in create_url_list() (CVE-2016-8863)
If there is an invalid URL in URLS->buf after a valid one, uri_parse is
called with out pointing after the allocated memory. As uri_parse writes
to *out before returning an error the loop in create_url_list must be
stopped early to prevent an out-of-bound access

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-12-26 08:23:18 +01:00
..
gupnp gupnp-tools: add intltool-native dependency 2016-08-15 12:21:38 +02:00
libupnp libupnp: Fix out-of-bound access in create_url_list() (CVE-2016-8863) 2016-12-26 08:23:18 +01:00
miniupnpd miniupnpd: Add recipe 2016-12-02 09:26:19 +01:00
rygel remove True option to getVar calls 2016-12-02 09:16:17 +01:00