From 89279d87c5d3e0ea330be1f927e3f3bc59dbc2a7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?P=C3=81LI=20G=C3=A1bor=20J=C3=A1nos?= Date: Thu, 3 Aug 2023 10:10:44 +0200 Subject: Update to Linux 6.1 and Alpine 3.18 - Update base-layout to 3.4.3 - Update busybox to 1.36.1 - Update iptables to 1.8.9 - Update linux-lts to 6.1.53 - Update to openrc to 0.48 - Update rtl8821ce to snapshot of 20230915 - Replace rtwB88 with a third-party driver - Update rtw89 to snapshot of 20230913 - Import wpa_supplicant fixes from Arch Linux --- ...e-after-free-in-bash-pattern-substitution.patch | 34 ++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 aports/busybox/0028-ash-use-after-free-in-bash-pattern-substitution.patch (limited to 'aports/busybox/0028-ash-use-after-free-in-bash-pattern-substitution.patch') diff --git a/aports/busybox/0028-ash-use-after-free-in-bash-pattern-substitution.patch b/aports/busybox/0028-ash-use-after-free-in-bash-pattern-substitution.patch new file mode 100644 index 0000000..a8c13e4 --- /dev/null +++ b/aports/busybox/0028-ash-use-after-free-in-bash-pattern-substitution.patch @@ -0,0 +1,34 @@ +From 3e83699ce23400d75c7ddaa7ebfdec015177caa7 Mon Sep 17 00:00:00 2001 +From: Karsten Sperling +Date: Thu, 18 May 2023 16:47:49 +0200 +Subject: [PATCH] ash: use-after-free in bash pattern substitution +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Commit daa66ed6 fixed a number of use-after-free bugs in bash pattern +substitution, however one "unguarded" STPUTC remained, which is fixed here. + +function old new delta +subevalvar 1564 1576 +12 + +Signed-off-by: Karsten Sperling +Signed-off-by: Denys Vlasenko +Signed-off-by: Sören Tempel +--- + shell/ash.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/shell/ash.c b/shell/ash.c +index d2c5c5d50..51b627fcc 100644 +--- a/shell/ash.c ++++ b/shell/ash.c +@@ -7370,6 +7370,8 @@ subevalvar(char *start, char *str, int strloc, + char *restart_detect = stackblock(); + if (quotes && *loc == '\\') { + STPUTC(CTLESC, expdest); ++ if (stackblock() != restart_detect) ++ goto restart; + len++; + } + STPUTC(*loc, expdest); -- cgit v1.2.3