pastalian/elfutils
1
0
Fork 0
forked from rpms/elfutils
Code Pull Requests Activity

import UBI elfutils-0.192-6.el10_0

Browse Source
This commit is contained in:
eabdullin 2025-06-24 09:44:28 +00:00
parent 9d4460cfd6
commit fc7089f086
2 changed files with 45 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
elfutils-0.192-fix-free.patch Normal file
View File

@ -0,0 +1,38 @@
From 1be0787d6654ed71bf659e8bfd34895fea7589eb Mon Sep 17 00:00:00 2001
From: Aaron Merey <amerey@redhat.com>
Date: Fri, 24 Jan 2025 19:43:19 -0500
Subject: [PATCH] debuginfod-client.c: Avoid freeing uninitialized value
debuginfod_validate_imasig might call free on an uninitialized sig_buf
due to a goto that can occur before sig_buf is set to NULL.
Fix this by setting sig_buf to NULL before the goto.
Signed-off-by: Aaron Merey <amerey@redhat.com>
---
debuginfod/debuginfod-client.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/debuginfod/debuginfod-client.c b/debuginfod/debuginfod-client.c
index deff19ff..d89beae9 100644
--- a/debuginfod/debuginfod-client.c
+++ b/debuginfod/debuginfod-client.c
@@ -1587,6 +1587,7 @@ debuginfod_validate_imasig (debuginfod_client *c, int fd)
{
int rc = ENOSYS;
+ char* sig_buf = NULL;
EVP_MD_CTX *ctx = NULL;
if (!c || !c->winning_headers)
{
@@ -1594,7 +1595,6 @@ debuginfod_validate_imasig (debuginfod_client *c, int fd)
goto exit_validate;
}
// Extract the HEX IMA-signature from the header
- char* sig_buf = NULL;
char* hdr_ima_sig = strcasestr(c->winning_headers, "x-debuginfod-imasignature");
if (!hdr_ima_sig || 1 != sscanf(hdr_ima_sig + strlen("x-debuginfod-imasignature:"), "%ms", &sig_buf))
{
--
2.48.1

8
elfutils.spec
View File

@ -4,7 +4,7 @@
Name: elfutils
Version: 0.192
%global baserelease 5
%global baserelease 6
Release: %{baserelease}%{?dist}
URL: http://elfutils.org/
%global source_url ftp://sourceware.org/pub/elfutils/%{version}/
@ -105,6 +105,9 @@ Patch3: elfutils-0.192-stacktrace-lto.patch
# Fix configure.ac setting ENABLE_DEBUGINFOD_IMA_VERIFICATION.
Patch4: elfutils-0.192-fix-configure-conditional.patch
# Avoid freeing uninitialized variable.
Patch5: elfutils-0.192-fix-free.patch
%description
Elfutils is a collection of utilities, including stack (to show
backtraces), nm (for listing symbols from object files), size
@ -526,6 +529,9 @@ exit 0
%systemd_postun_with_restart debuginfod.service
%changelog
* Fri Mar 14 2025 Aaron Merey <amerey@redhat.com> - 0.192-6
- Add elfutils-0.192-fix-free.patch
* Fri Dec 13 2024 Aaron Merey <amerey@redhat.com> - 0.192-5
- Enable debuginfod IMA verification
- Add elfutils-0.192-fix-configure-conditional.patch