mirror of
https://github.com/godotengine/buildroot.git
synced 2026-01-04 06:10:16 +03:00
Fixes CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. This patch checks that there is enough data for the required elements of an NAPTR record (2 int16, 3 bytes for string lengths) before processing a record. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
6 lines
325 B
Plaintext
6 lines
325 B
Plaintext
# From upstream URL: http://nodejs.org/dist/v0.10.48/SHASUMS256.txt
|
|
sha256 365a93d9acc076a0d93f087d269f376abeebccad599a9dab72f2f6ed96c8ae6e node-v0.10.48.tar.xz
|
|
|
|
# From upstream URL: http://nodejs.org/dist/v6.11.1/SHASUMS256.txt
|
|
sha256 6f6655b85919aa54cb045a6d69a226849802fcc26491d0db4ce59873e41cc2b8 node-v6.11.1.tar.xz
|