helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-05-22 02:33:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

libiec61850: patch CVE-2024-45969

Browse Source 
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-45969

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Gyorgy Sarvari 2026-01-30 08:06:20 +01:00
parent fd620677ce
commit 90575e38b7
2 changed files with 33 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
meta-networking/recipes-connectivity/libiec61850/files/CVE-2024-45969.patch Normal file
View File

@ -0,0 +1,31 @@
From d1afa7d8946ff05f73440e1fb5c14adcd5058b0d Mon Sep 17 00:00:00 2001
From: Michael Zillgith <michael.zillgith@mz-automation.de>
Date: Wed, 27 Mar 2024 12:26:58 +0000
Subject: [PATCH] - ACSE: added check for minimum message size (LIB61850-438)
CVE: CVE-2024-45969
Upstream-Status: Backport [https://github.com/mz-automation/libiec61850/commit/7afa40390b26ad1f4cf93deaa0052fe7e357ef33]
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
src/mms/iso_acse/acse.c | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/src/mms/iso_acse/acse.c b/src/mms/iso_acse/acse.c
index 60b0f534..1f4d6eb9 100644
--- a/src/mms/iso_acse/acse.c
+++ b/src/mms/iso_acse/acse.c
@@ -420,6 +420,14 @@ AcseConnection_parseMessage(AcseConnection* self, ByteBuffer* message)
{
AcseIndication indication = ACSE_ERROR;
+ if (message == NULL || message->size < 1)
+ {
+ if (DEBUG_ACSE)
+ printf("ACSE: invalid message - no payload\n");
+
+ return ACSE_ERROR;
+ }
+
uint8_t* buffer = message->buffer;
int messageSize = message->size;

3
meta-networking/recipes-connectivity/libiec61850/libiec61850_1.5.1.bb
View File

@ -18,7 +18,8 @@ SRCREV = "210cf30897631fe2006ac50483caf8fd616622a2"
SRC_URI = "git://github.com/mz-automation/${BPN}.git;branch=v1.5;protocol=https \
file://0001-pyiec61850-don-t-break-CMAKE_INSTALL_PATH-by-trying-.patch \
file://0001-pyiec61850-Use-CMAKE_INSTALL_LIBDIR-from-GNUInstallD.patch \
"
file://CVE-2024-45969.patch \
"
S = "${WORKDIR}/git"