282fc60ed4
While processing ARP/NCSI packets in 'arp_input' or 'ncsi_input' routines, ensure that pkt_len is large enough to accommodate the respective protocol headers, lest it should do an OOB access. Add check to avoid it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
21 lines
698 B
Makefile
21 lines
698 B
Makefile
################################################################################
|
|
#
|
|
# slirp
|
|
#
|
|
################################################################################
|
|
|
|
SLIRP_VERSION = 4.3.1
|
|
SLIRP_SOURCE = libslirp-$(SLIRP_VERSION).tar.xz
|
|
# Other "official" tarballs don't ship .tarball-version resulting in a build
|
|
# failure: https://gitlab.freedesktop.org/slirp/libslirp/-/issues/24
|
|
SLIRP_SITE = https://elmarco.fedorapeople.org
|
|
SLIRP_LICENSE = BSD-3-Clause
|
|
SLIRP_LICENSE_FILES = COPYRIGHT
|
|
SLIRP_INSTALL_STAGING = YES
|
|
SLIRP_DEPENDENCIES = libglib2
|
|
|
|
# 0001-slirp-check-pkt_len-before-reading-protocol-header.patch
|
|
SLIRP_IGNORE_CVES += CVE-2020-29129 CVE-2020-29130
|
|
|
|
$(eval $(meson-package))
|