mirror of
git://git.yoctoproject.org/poky.git
synced 2025-07-19 21:09:03 +02:00
62917950b7
CVE-2018-10689: blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file. References: https://nvd.nist.gov/vuln/detail/CVE-2018-10689 Patch from: https://git.kernel.org/pub/scm/linux/kernel/git/axboe/blktrace.git/commit/?id=d61ff409cb4dda31386373d706ea0cfb1aaac5b7 (From OE-Core rev: 6a7ed8b1db10abd38bdd20c77a8f27427d381156) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
43 lines
1.2 KiB
BlitzBasic
43 lines
1.2 KiB
BlitzBasic
SUMMARY = "Generates traces of I/O traffic on block devices"
|
|
HOMEPAGE = "http://brick.kernel.dk/snaps/"
|
|
LICENSE = "GPLv2"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=393a5ca445f6965873eca0259a17f833"
|
|
|
|
DEPENDS = "libaio"
|
|
|
|
SRCREV = "cca113f2fe0759b91fd6a0e10fdcda2c28f18a7e"
|
|
|
|
PV = "1.2.0+git${SRCPV}"
|
|
|
|
SRC_URI = "git://git.kernel.dk/blktrace.git \
|
|
file://ldflags.patch \
|
|
file://CVE-2018-10689.patch \
|
|
"
|
|
|
|
S = "${WORKDIR}/git"
|
|
|
|
EXTRA_OEMAKE = "\
|
|
'CC=${CC}' \
|
|
'CFLAGS=${CFLAGS}' \
|
|
'LDFLAGS=${LDFLAGS}' \
|
|
"
|
|
|
|
# There are a few parallel issues:
|
|
# 1) ../rbtree.o: error adding symbols: Invalid operation
|
|
# collect2: error: ld returned 1 exit status
|
|
# Makefile:42: recipe for target 'btt' failed
|
|
# 2) git/blkiomon.c:216: undefined reference to `rb_insert_color'
|
|
# collect2: error: ld returned 1 exit status
|
|
# Makefile:27: recipe for target 'blkparse' failed
|
|
# 3) ld: rbtree.o: invalid string offset 128 >= 125 for section `.strtab'
|
|
# 4) btreplay.o: file not recognized: File truncated
|
|
# collect2: error: ld returned 1 exit status
|
|
# btreplay/btreplay.c:47:18: fatal error: list.h: No such file or directory
|
|
PARALLEL_MAKE = ""
|
|
|
|
do_install() {
|
|
oe_runmake ARCH="${ARCH}" prefix=${prefix} \
|
|
mandir=${mandir} DESTDIR=${D} install
|
|
}
|
|
|