openwrt/package/libs/zlib/patches
Petr Štetiar 3965dda0fa zlib: backport security fix for a reproducible crash in compressor
Tavis has just reported, that he was recently trying to track down a
reproducible crash in a compressor. Believe it or not, it really was a
bug in zlib-1.2.11 when compressing (not decompressing!) certain inputs.

Tavis has reported it upstream, but it turns out the issue has been
public since 2018, but the patch never made it into a release. As far as
he knows, nobody ever assigned it a CVE.

Suggested-by: Tavis Ormandy <taviso@gmail.com>
References: https://www.openwall.com/lists/oss-security/2022/03/24/1
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit b3aa2909a7)
2022-03-24 08:18:21 +01:00
..
001-neon-implementation-of-adler32.patch package/libs/zlib: Add ARM and NEON optimizations 2018-01-02 17:11:12 +01:00
002-arm-specific-optimisations-for-inflate.patch zlib: properly split patches 2021-02-24 14:08:29 +01:00
003-arm-specific-optimisations-for-inflate.patch zlib: properly split patches 2021-02-24 14:08:29 +01:00
004-attach-sourcefiles-in-patch-002-to-buildsystem.patch zlib: properly split patches 2021-02-24 14:08:29 +01:00
005-relative-pkg-config-paths.patch zlib: properly split patches 2021-02-24 14:08:29 +01:00
006-fix-compressor-crash-on-certain-inputs.patch zlib: backport security fix for a reproducible crash in compressor 2022-03-24 08:18:21 +01:00