]> git.ipfire.org Git - thirdparty/shairport-sync.git/commit
tinysvcmdns: fix CVE-2017-12087 621/head
authorChris Boot <bootc@bootc.net>
Thu, 23 Nov 2017 14:27:27 +0000 (14:27 +0000)
committerChris Boot <bootc@bootc.net>
Thu, 23 Nov 2017 14:37:55 +0000 (14:37 +0000)
commit1dbdf94811b8315705dbac5ba9199d417231c5d3
tree7b10149f693b58150dba62bf8b6d6884b749d15f
parent7df55d8c9ef40d3d75596003363ef6c080ac3552
tinysvcmdns: fix CVE-2017-12087

This patch incorporates upstream's fixes for a remotely exploitable
buffer overflow bug in the bundled tinysvcmdns library. The following
upstream commits are included:

https://bitbucket.org/geekman/tinysvcmdns/commits/48c73fbb36b7a5584b00538d89c89dd8b15ab2a7
https://bitbucket.org/geekman/tinysvcmdns/commits/29ea1b9fca94dc42d16109e050d2967231b1e341

The changes have been incorporated preserving local changes such as the
check for malloc() returning NULL.

Reported against shairport-sync in Ubuntu Launchpad:
https://bugs.launchpad.net/ubuntu/+source/shairport-sync/+bug/1729668

This commit closes GitHub issue #619.
tinysvcmdns.c