helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-05-22 04:46:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

yasm: fix CVE-2024-22653

Browse Source 
yasm commit 9defefae was discovered to contain a NULL pointer
dereference via the yasm_section_bcs_append function at section.c.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-22653

Upstream-patch:
121ab150b3

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This commit is contained in:
Praveen Kumar 2025-10-15 17:29:42 +05:30 committed by Anuj Mittal
parent 5be19f09df
commit ed71c716fa
No known key found for this signature in database
GPG Key ID: B749E1556041E1B2
2 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
meta-oe/recipes-devtools/yasm/yasm/CVE-2024-22653.patch Normal file
View File

@ -0,0 +1,32 @@
From 121ab150b3577b666c79a79f4a511798d7ad2432 Mon Sep 17 00:00:00 2001
From: haruki3hhh <135201297+haruki3hhh@users.noreply.github.com>
Date: Mon, 24 Jun 2024 18:08:27 -0500
Subject: [PATCH] Fix null pointer dereference in yasm_section_bcs_append
(#263)
CVE: CVE-2024-22653
Upstream-Status: Backport [https://github.com/yasm/yasm/commit/121ab150b3577b666c79a79f4a511798d7ad2432]
Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
---
libyasm/section.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/libyasm/section.c b/libyasm/section.c
index ba582bfa..1c1ba710 100644
--- a/libyasm/section.c
+++ b/libyasm/section.c
@@ -611,6 +611,10 @@ yasm_bytecode *
yasm_section_bcs_append(yasm_section *sect, yasm_bytecode *bc)
{
if (bc) {
+ if (!sect) {
+ yasm_error_set(YASM_ERROR_VALUE, "Attempt to append bytecode to a NULL section or with a NULL bytecode");
+ return NULL;
+ }
if (bc->callback) {
bc->section = sect; /* record parent section */
STAILQ_INSERT_TAIL(&sect->bcs, bc, link);
--
2.40.0

1
meta-oe/recipes-devtools/yasm/yasm_git.bb
View File

@ -16,6 +16,7 @@ SRC_URI = "git://github.com/yasm/yasm.git;branch=master;protocol=https \
file://CVE-2023-37732.patch \
file://0001-yasm-Set-build-date-to-SOURCE_DATE_EPOCH.patch \
file://0002-yasm-Use-BUILD_DATE-for-reproducibility.patch \
file://CVE-2024-22653.patch \
"
S = "${WORKDIR}/git"