diff options
Diffstat (limited to 'meta-networking/recipes-protocols/net-snmp/net-snmp/0001-Fix-CVE-2014-2285.patch')
-rw-r--r-- | meta-networking/recipes-protocols/net-snmp/net-snmp/0001-Fix-CVE-2014-2285.patch | 49 |
1 files changed, 0 insertions, 49 deletions
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-Fix-CVE-2014-2285.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-Fix-CVE-2014-2285.patch deleted file mode 100644 index b1514b97f9..0000000000 --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-Fix-CVE-2014-2285.patch +++ /dev/null @@ -1,49 +0,0 @@ -From 87a0d27102ceffb92e5c1d6fbbd24972a9dd33ac Mon Sep 17 00:00:00 2001 -From: Junling Zheng <zhengjunling@huawei.com> -Date: Mon, 20 Apr 2015 10:23:08 +0000 -Subject: [PATCH] Fix CVE-2014-2285 - -Sending SNMP trap with empty community string crashes snmptrapd if Perl -handler is enabled. - -Refer to: -https://bugzilla.redhat.com/show_bug.cgi?id=1072044 - -Upstream Status: Backported - -Signed-off-by: Junling Zheng <zhengjunling@huawei.com> ---- - perl/TrapReceiver/TrapReceiver.xs | 10 +++++----- - 1 file changed, 5 insertions(+), 5 deletions(-) - -diff --git a/perl/TrapReceiver/TrapReceiver.xs b/perl/TrapReceiver/TrapReceiver.xs -index 531bfa4..ac94370 100644 ---- a/perl/TrapReceiver/TrapReceiver.xs -+++ b/perl/TrapReceiver/TrapReceiver.xs -@@ -81,18 +81,18 @@ int perl_trapd_handler( netsnmp_pdu *pdu, - STOREPDUi("securitymodel", pdu->securityModel); - STOREPDUi("securitylevel", pdu->securityLevel); - STOREPDU("contextName", -- newSVpv(pdu->contextName, pdu->contextNameLen)); -+ newSVpv(pdu->contextName ? pdu->contextName : "", pdu->contextNameLen)); - STOREPDU("contextEngineID", -- newSVpv((char *) pdu->contextEngineID, -+ newSVpv((char *)(pdu->contextEngineID ? pdu->contextEngineID : ""), - pdu->contextEngineIDLen)); - STOREPDU("securityEngineID", -- newSVpv((char *) pdu->securityEngineID, -+ newSVpv((char *)(pdu->securityEngineID ? pdu->securityEngineID : ""), - pdu->securityEngineIDLen)); - STOREPDU("securityName", -- newSVpv((char *) pdu->securityName, pdu->securityNameLen)); -+ newSVpv((char *)(pdu->securityName ? pdu->securityName : ""), pdu->securityNameLen)); - } else { - STOREPDU("community", -- newSVpv((char *) pdu->community, pdu->community_len)); -+ newSVpv((char *)(pdu->community ? pdu->community : ""), pdu->community_len)); - } - - if (transport && transport->f_fmtaddr) { --- -1.8.3.4 - |