281871e6b0
Fixes CVE-2019-13224: A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Fixes CVE-2019-13225: A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
16 lines
441 B
Makefile
16 lines
441 B
Makefile
################################################################################
|
|
#
|
|
# oniguruma
|
|
#
|
|
################################################################################
|
|
|
|
ONIGURUMA_VERSION = 6.9.3
|
|
ONIGURUMA_SITE = $(call github,kkos,oniguruma,v$(ONIGURUMA_VERSION))
|
|
ONIGURUMA_LICENSE = BSD-2-Clause
|
|
ONIGURUMA_LICENSE_FILES = COPYING
|
|
# From git
|
|
ONIGURUMA_AUTORECONF = YES
|
|
ONIGURUMA_INSTALL_STAGING = YES
|
|
|
|
$(eval $(autotools-package))
|