openwrt/toolchain
Petr Štetiar 733a482733 musl: handle wcsnrtombs destination buffer overflow (CVE-2020-28928)
The wcsnrtombs function in all musl libc versions up through 1.2.1 has
been found to have multiple bugs in handling of destination buffer
size when limiting the input character count, which can lead to
infinite loop with no forward progress (no overflow) or writing past
the end of the destination buffera.

This function is not used internally in musl and is not widely used,
but does appear in some applications. The non-input-limiting form
wcsrtombs is not affected.

All users of musl 1.2.1 and prior versions should apply the attached
patch, which replaces the overly complex and erroneous implementation.
The upcoming 1.2.2 release will adopt this new implementation.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 4d4ef1058c)
2020-11-23 22:37:03 +01:00
..
binutils toolchain/binutils: use default Host/Configure rule 2019-05-11 23:10:10 +02:00
fortify-headers toolchain/fortify-headers: Update to 1.1 2019-09-04 13:33:29 +02:00
gcc toolchain/gcc: Backport patch to fix unconditional MULTIARCH_DIRNAME 2019-12-23 00:31:20 +01:00
gdb toolchain/gdb: bump to 8.3.1 2019-10-15 16:13:06 +02:00
glibc glibc: update to latest 2.27 commit (BZ #2503, BZ #2504) 2019-12-14 14:06:33 +01:00
kernel-headers kernel-headers: adjust PKG_ variables when using git clone method 2018-01-27 16:46:45 +01:00
musl musl: handle wcsnrtombs destination buffer overflow (CVE-2020-28928) 2020-11-23 22:37:03 +01:00
nasm toolchain/nasm: update to version 2.14 2019-05-11 01:30:00 +02:00
uClibc update uClibc-ng from 1.0.30 to 1.0.31 2019-01-27 01:04:53 +01:00
wrapper buildroot: allow specifying libc personality for external toolchains 2013-02-20 15:06:10 +00:00
Config.in toolchain: replace LEDE in help text 2019-06-10 11:31:52 +02:00
info.mk uClibc cleanup: - use full version string (0.9.30.1), instead of base (0.9.30) + extra (.1) - remove support for 0.9.28 and snapshots (building from SVN to be added later) 2009-04-24 02:07:24 +00:00
Makefile toolchain: fix gcc depends on kernel headers 2019-09-04 13:35:53 +02:00