You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Petr Štetiar 733a482733 musl: handle wcsnrtombs destination buffer overflow (CVE-2020-28928) ... The wcsnrtombs function in all musl libc versions up through 1.2.1 has been found to have multiple bugs in handling of destination buffer size when limiting the input character count, which can lead to infinite loop with no forward progress (no overflow) or writing past the end of the destination buffera. This function is not used internally in musl and is not widely used, but does appear in some applications. The non-input-limiting form wcsrtombs is not affected. All users of musl 1.2.1 and prior versions should apply the attached patch, which replaces the overly complex and erroneous implementation. The upcoming 1.2.2 release will adopt this new implementation. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 4d4ef1058c0f10aa2fa4070cd6b9db4d48b94148)		4 years ago
..
binutils	toolchain/binutils: use default Host/Configure rule	5 years ago
fortify-headers	toolchain/fortify-headers: Update to 1.1	5 years ago
gcc	toolchain/gcc: Backport patch to fix unconditional MULTIARCH_DIRNAME	4 years ago
gdb	toolchain/gdb: bump to 8.3.1	5 years ago
glibc	glibc: update to latest 2.27 commit (BZ #2503, BZ #2504)	4 years ago
kernel-headers	kernel-headers: adjust PKG_ variables when using git clone method	6 years ago
musl	musl: handle wcsnrtombs destination buffer overflow (CVE-2020-28928)	4 years ago
nasm	toolchain/nasm: update to version 2.14	5 years ago
uClibc	update uClibc-ng from 1.0.30 to 1.0.31	5 years ago
wrapper	buildroot: allow specifying libc personality for external toolchains	11 years ago
Config.in	toolchain: replace LEDE in help text	5 years ago
Makefile	toolchain: fix gcc depends on kernel headers	5 years ago
info.mk	uClibc cleanup: - use full version string (0.9.30.1), instead of base (0.9.30) + extra (.1) - remove support for 0.9.28 and snapshots (building from SVN to be added later)	15 years ago