mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-09-24 23:21:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

app-crypt/mhash: Sync with Gentoo

Browse Source 
It's from Gentoo commit 62b38c216dc300d3300f24a19d8de5ff6fc644bb.
This commit is contained in:
Flatcar Buildbot 2024-01-01 07:10:24 +00:00 committed by Krzesimir Nowak
parent f3e343ce69
commit b377cf89d6
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
sdk_container/src/third_party/portage-stable/app-crypt/mhash/files/mhash-0.9.9.9-hmac-uaf-test.patch vendored Normal file
View File

@ -0,0 +1,19 @@
https://bugs.gentoo.org/914173
https://sourceforge.net/p/mhash/patches/12/
https://sourceforge.net/p/mhash/bugs/43/
Fixes a segfault due to use-after-free on x86 & ARM in the test suite.
Index: mhash-0.9.9.9/src/hmac_test.c
===================================================================
--- mhash-0.9.9.9/src/hmac_test.c
+++ mhash-0.9.9.9/src/hmac_test.c 2020-04-01 00:04:44.039815882 +0200
@@ -76,8 +76,6 @@
/* Test No 2 */
- mutils_memset(tmp, 0, sizeof(tmp));
-
passlen=sizeof(KEY2) - 1;
password = (mutils_word8 *) mutils_malloc(passlen+1);
mutils_memcpy(password, KEY2, passlen);

1
sdk_container/src/third_party/portage-stable/app-crypt/mhash/mhash-0.9.9.9-r3.ebuild vendored
View File

@ -26,6 +26,7 @@ PATCHES=(
"${FILESDIR}"/${P}-align.patch
"${FILESDIR}"/${P}-alignment.patch
"${FILESDIR}"/${P}-no-malloc-check.patch
"${FILESDIR}"/${P}-hmac-uaf-test.patch
)
DOCS=( doc/example.c doc/skid2-authentication )