MIRRORS/poky
1
0
Fork 0
mirror of git://git.yoctoproject.org/poky.git synced 2025-07-19 12:59:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

binutils: Fix for CVE-2025-3198

Browse Source 
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d]
CVE: CVE-2025-3198

(From OE-Core rev: 602d1cab0f8e11925244a27310086b195de70464)

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Harish Sadineni 2025-06-10 01:30:59 -07:00 committed by Richard Purdie
parent 3946dc51ac
commit 436bde4c5f
2 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
meta/recipes-devtools/binutils/binutils-2.44.inc
View File

@ -42,5 +42,6 @@ SRC_URI = "\
file://0017-CVE-2025-1181-2.patch \ file://0017-CVE-2025-1181-2.patch \
file://0018-CVE-2025-5245.patch \ file://0018-CVE-2025-5245.patch \
file://0019-CVE-2025-5244.patch \ file://0019-CVE-2025-5244.patch \
file://0019-CVE-2025-3198.patch \
" "
S = "${WORKDIR}/git" S = "${WORKDIR}/git"

28
meta/recipes-devtools/binutils/binutils/0019-CVE-2025-3198.patch Normal file
View File

@ -0,0 +1,28 @@
From ba6ad3a18cb26b79e0e3b84c39f707535bbc344d Mon Sep 17 00:00:00 2001
From: Alan Modra <amodra@gmail.com>
Date: Wed, 19 Feb 2025 07:58:54 +1030
Subject: [PATCH] PR32716, objdump -i memory leak
PR binutils/32716
* bucomm.c (display_info): Free arg.info.
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d]
CVE: CVE-2025-3198
Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
---
binutils/bucomm.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/binutils/bucomm.c b/binutils/bucomm.c
index ccf54099154..d4554737db1 100644
--- a/binutils/bucomm.c
+++ b/binutils/bucomm.c
@@ -435,6 +435,7 @@ display_info (void)
if (!arg.error)
display_target_tables (&arg);
+ free (arg.info);
return arg.error;
}