mirror of
git://git.yoctoproject.org/poky
synced 2026-09-29 20:10:12 +00:00
8d07cacde3
An out of bounds read access in the UTF-8 decoding can be triggered with a malformed file in the tool less. The access happens in the function is_utf8_well_formed due to a truncated multibyte character in the sample file. The bug does not crash less, it can only be made visible by running less with valgrind or compiling it with Address Sanitizer. Version 475 of less contains a fix for this issue. The file version.c contains some entry mentioning this issue (without any credit): - v475 3/2/15 Fix possible buffer overrun with invalid UTF-8 The fix is in the file line.c. We derive this patch from: https://blog.fuzzing-project.org/3-less-out-of-bounds-read-access-TFPA-0022014.html Thank Claire Robinson for validating it on Mageia 4 i586. Refer to: https://bugs.mageia.org/show_bug.cgi?id=15567 (From OE-Core master rev: 68994284f3c059b737bfc5afc2600ebd09bdf47f) (From OE-Core rev: 7195d219f7af2b94dffb87a94077ec98dacdcdb0) Signed-off-by: Junling Zheng <zhengjunling@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
42 lines
1.3 KiB
BlitzBasic
42 lines
1.3 KiB
BlitzBasic
SUMMARY = "Text file viewer similar to more"
|
|
DESCRIPTION = "Less is a program similar to more, i.e. a terminal \
|
|
based program for viewing text files and the output from other \
|
|
programs. Less offers many features beyond those that more does."
|
|
HOMEPAGE = "http://www.greenwoodsoftware.com/"
|
|
SECTION = "console/utils"
|
|
|
|
# (GPLv2+ (<< 418), GPLv3+ (>= 418)) | less
|
|
# Including email author giving permissing to use BSD
|
|
#
|
|
# From: Mark Nudelman <markn@greenwoodsoftware.com>
|
|
# To: Elizabeth Flanagan <elizabeth.flanagan@intel.com
|
|
# Date: 12/19/11
|
|
#
|
|
# Hi Elizabeth,
|
|
# Using a generic BSD license for less is fine with me.
|
|
# Thanks,
|
|
#
|
|
# --Mark
|
|
#
|
|
|
|
LICENSE = "GPLv3+ | BSD-2-Clause"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504 \
|
|
file://LICENSE;md5=866cc220f330b04ae4661fc3cdfedea7"
|
|
DEPENDS = "ncurses"
|
|
|
|
SRC_URI = "http://www.greenwoodsoftware.com/${BPN}/${BPN}-${PV}.tar.gz \
|
|
file://0001-Fix-possible-buffer-overrun-with-invalid-UTF-8.patch \
|
|
"
|
|
|
|
SRC_URI[md5sum] = "9a40d29a2d84b41f9f36d7dd90b4f950"
|
|
SRC_URI[sha256sum] = "37f613fa9a526378788d790a92217d59b523574cf7159f6538da8564b3fb27f8"
|
|
|
|
inherit autotools update-alternatives
|
|
|
|
do_install () {
|
|
oe_runmake 'bindir=${D}${bindir}' 'mandir=${D}${mandir}' install
|
|
}
|
|
|
|
ALTERNATIVE_${PN} = "less"
|
|
ALTERNATIVE_PRIORITY = "100"
|