From 4d9d8381b1ec69b2736fabb78890f8c1faaf16e3 Mon Sep 17 00:00:00 2001 From: Juan RP Date: Tue, 20 Jan 2015 14:37:23 +0100 Subject: [PATCH] polarssl: security patch for CVE 2015-1182. --- srcpkgs/polarssl/patches/CVE-2015-1182.patch | 11 +++++++++++ srcpkgs/polarssl/template | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) create mode 100644 srcpkgs/polarssl/patches/CVE-2015-1182.patch diff --git a/srcpkgs/polarssl/patches/CVE-2015-1182.patch b/srcpkgs/polarssl/patches/CVE-2015-1182.patch new file mode 100644 index 00000000000..3d2de7c76df --- /dev/null +++ b/srcpkgs/polarssl/patches/CVE-2015-1182.patch @@ -0,0 +1,11 @@ +--- library/asn1parse.c ++++ library/asn1parse.c +@@ -278,6 +278,8 @@ int asn1_get_sequence_of( unsigned char **p, + if( cur->next == NULL ) + return( POLARSSL_ERR_ASN1_MALLOC_FAILED ); + ++ memset( cur->next, 0, sizeof( asn1_sequence ) ); ++ + cur = cur->next; + } + } diff --git a/srcpkgs/polarssl/template b/srcpkgs/polarssl/template index d2231b5de10..dc13d2d17c9 100644 --- a/srcpkgs/polarssl/template +++ b/srcpkgs/polarssl/template @@ -1,7 +1,7 @@ # Template file for 'polarssl' pkgname=polarssl version=1.3.9 -revision=3 +revision=4 build_style=cmake configure_args="-DENABLE_ZLIB_SUPPORT=on -DUSE_SHARED_POLARSSL_LIBRARY=on" hostmakedepends="cmake perl"