diff options
| author | Andrej Valek <andrej.valek@siemens.com> | 2016-12-12 14:20:20 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-12-16 08:30:01 +0000 |
| commit | 00e928bd1c2aed9caeaf9e411743805d2139a023 (patch) | |
| tree | 82ad7f61ead5a71f39effc480b27f8248c1ac3ed /meta/lib/oeqa/sdk/gcc.py | |
| parent | 96ef568f75dded56a2123b63dcc8b443f796afe0 (diff) | |
| download | openembedded-core-00e928bd1c2aed9caeaf9e411743805d2139a023.tar.gz openembedded-core-00e928bd1c2aed9caeaf9e411743805d2139a023.tar.bz2 openembedded-core-00e928bd1c2aed9caeaf9e411743805d2139a023.zip | |
libxml2: fix CVE-2016-4658 Disallow namespace nodes in XPointer points and ranges
Namespace nodes must be copied to avoid use-after-free errors.
But they don't necessarily have a physical representation in a
document, so simply disallow them in XPointer ranges.
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/lib/oeqa/sdk/gcc.py')
0 files changed, 0 insertions, 0 deletions