Peter Korsgaard 738a80e2eb libupnp: add upstream security fix for CVE-2016-8863 ...

Fix out-of-bound access in create_url_list()

If there is an invalid URL in URLS->buf after a valid one, uri_parse is
called with out pointing after the allocated memory. As uri_parse writes
to *out before returning an error the loop in create_url_list must be
stopped early to prevent an out-of-bound access.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
(cherry picked from commit c489cbad77)

2016-12-19 23:14:28 +01:00

..

0001-Don-t-allow-unhandled-POSTs-to-write-to-the-filesyst.patch

…

0002-Fix-out-of-bound-access-in-create_url_list-CVE-2016-.patch

libupnp: add upstream security fix for CVE-2016-8863

2016-12-19 23:14:28 +01:00

Config.in

…

libupnp.hash

…

libupnp.mk

…