helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2025-12-31 13:38:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

libavif: patch CVE-2025-48174

Browse Source 
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-48174

Backport the pull request mentioned in the details of the CVE.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Gyorgy Sarvari 2025-10-09 21:00:26 +02:00
parent b7c5dc918d
commit 90145daef3
2 changed files with 30 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
meta-multimedia/recipes-multimedia/libavif/libavif/0001-Add-integer-overflow-check-to-makeRoom.patch Normal file
View File

@ -0,0 +1,27 @@
From b6fc69afc6e1156455c70ebd2227b82fc4f1769f Mon Sep 17 00:00:00 2001
From: Gyorgy Sarvari <skandigraun@gmail.com>
Date: Thu, 9 Oct 2025 20:50:57 +0200
Subject: [PATCH] Add integer overflow check to makeRoom.
CVE: CVE-2025-48174
Upstream-Status: Backport [https://github.com/AOMediaCodec/libavif/pull/2768]
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
src/stream.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/src/stream.c b/src/stream.c
index c85ca31b..b38c93c6 100644
--- a/src/stream.c
+++ b/src/stream.c
@@ -319,6 +319,9 @@ avifBool avifROStreamReadAndEnforceVersion(avifROStream * stream, uint8_t enforc
#define AVIF_STREAM_BUFFER_INCREMENT (1024 * 1024)
static avifResult makeRoom(avifRWStream * stream, size_t size)
{
+ if (size > SIZE_MAX - stream->offset) {
+ return AVIF_RESULT_OUT_OF_MEMORY;
+ }
size_t neededSize = stream->offset + size;
size_t newSize = stream->raw->size;
while (newSize < neededSize) {

4
meta-multimedia/recipes-multimedia/libavif/libavif_1.0.1.bb
View File

@ -4,7 +4,9 @@ SECTION = "libs"
LICENSE = "BSD-2-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=c528b75b07425b5c1d2e34de98c397b5"
SRC_URI = "git://github.com/AOMediaCodec/libavif.git;protocol=https;branch=v1.0.x"
SRC_URI = "git://github.com/AOMediaCodec/libavif.git;protocol=https;branch=v1.0.x \
file://0001-Add-integer-overflow-check-to-makeRoom.patch \
"
S = "${WORKDIR}/git"
SRCREV = "d1c26facaf5a8a97919ceee06814d05d10e25622"