Skip to content

Fix fuzzy CVE patch for protobuf#550

Closed
fwuehr95 wants to merge 1 commit intoopenembedded:dunfellfrom
fwuehr95:dunfell
Closed

Fix fuzzy CVE patch for protobuf#550
fwuehr95 wants to merge 1 commit intoopenembedded:dunfellfrom
fwuehr95:dunfell

Conversation

@fwuehr95
Copy link

Signed-off-by: Alexander Thoma a.thoma@rational-online.com
Signed-off-by: Florian Wühr f.wuehr@rational-online.com

tewarid pushed a commit to tewarid/meta-openembedded that referenced this pull request Mar 22, 2022
Changelog:
=========
Added:
-----
new flag --code-quote-style (and $BATS_CODE_QUOTE_STYLE) to customize
quotes around code blocks in error output (openembedded#506)
an example/regression test for running background tasks without blocking the
test run (openembedded#525, openembedded#535)
bats_load_library for loading libraries from the search path
$BATS_LIB_PATH (openembedded#548)

Fixed:
-----
improved error trace for some broken cases (openembedded#279)
removed leftover debug file /tmp/latch in selftest suite
(single use latch) (openembedded#516)
fix recurring errors on CTRL+C tests with NPM on Windows in selftest suite (openembedded#516)
fixed leaking of local variables from debug trap (openembedded#520)
don't mark FD3 output from teardown_file as <failure> in junit output (openembedded#532)
fix unbound variable error with Bash pre 4.4 (openembedded#550)

Documentation:
--------------
remove links to defunct freenode IRC channel (openembedded#515)
improved grammar (openembedded#534)
fixed link to TAP spec (openembedded#537)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
@akuster
Copy link
Contributor

akuster commented Apr 4, 2022

are you still seeing a issue with the current dunfell?

@fwuehr95
Copy link
Author

fwuehr95 commented Apr 5, 2022

@akuster no, looks as if it has been resolved with a14eb5e

@fwuehr95 fwuehr95 closed this Apr 5, 2022
@fwuehr95 fwuehr95 deleted the dunfell branch April 5, 2022 05:53
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Jul 15, 2022
Changelog:
=========
Added
------
    Add support for arbitrary size integers (openembedded#548)

Fixed
---------
    CVE-2022-31116:
        Replace wchar_t string decoding implementation with a uint32_t-based one (openembedded#555)
        Fix handling of surrogates on decoding (openembedded#550)
    CVE-2022-31117: Potential double free of buffer during string decoding
    Fix memory leak on encoding errors when the buffer was resized (openembedded#549)
    Integer parsing: always detect overflows (openembedded#544)
    Fix handling of surrogates on encoding (openembedded#530)

Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants