rpms/cpio
5
0
Fork 0
Code Issues Pull Requests Releases Activity

testsuite: big-endian fix for CVE-2014-9112 case

Browse Source 
The testsed archive was crated on x86_64 machine and it produces
expected warning on big-endian arches.

Related: #1167573
Version: 2.11-33
This commit is contained in:
Pavel Raiskup 2014-12-03 13:21:44 +01:00
parent 5f6efa04bf
commit 81767808aa
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cpio-2.11-testsuite-CVE-2014-9112.patch
View File

@ -1,8 +1,8 @@
diff --git a/tests/symlink-bad-length.at b/tests/symlink-bad-length.at diff --git a/tests/symlink-bad-length.at b/tests/symlink-bad-length.at
index cbf4aa7..f8f60e3 100644 index cbf4aa7..d8d250b 100644
--- a/tests/symlink-bad-length.at --- a/tests/symlink-bad-length.at
+++ b/tests/symlink-bad-length.at +++ b/tests/symlink-bad-length.at
@@ -37,13 +37,19 @@ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= @@ -37,13 +37,20 @@ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
AT_CHECK([ AT_CHECK([
base64 -d ARCHIVE.base64 > ARCHIVE || AT_SKIP_TEST base64 -d ARCHIVE.base64 > ARCHIVE || AT_SKIP_TEST
@ -13,6 +13,7 @@ index cbf4aa7..f8f60e3 100644
+cat stderr | grep -v \ +cat stderr | grep -v \
+ -e 'stored filename length is out of range' \ + -e 'stored filename length is out of range' \
+ -e 'premature end of file' \ + -e 'premature end of file' \
+ -e 'archive header has reverse byte-order' \
+ -e 'memory exhausted' \ + -e 'memory exhausted' \
+ >&2 + >&2
+echo >&2 STDERR +echo >&2 STDERR

6
cpio.spec
View File

@ -1,7 +1,7 @@
Summary: A GNU archiving program Summary: A GNU archiving program
Name: cpio Name: cpio
Version: 2.11 Version: 2.11
Release: 32%{?dist} Release: 33%{?dist}
License: GPLv3+ License: GPLv3+
Group: Applications/Archiving Group: Applications/Archiving
URL: http://www.gnu.org/software/cpio/ URL: http://www.gnu.org/software/cpio/
@ -143,6 +143,10 @@ fi
%{_infodir}/*.info* %{_infodir}/*.info*
%changelog %changelog
* Wed Dec 03 2014 Pavel Raiskup <praiskup@redhat.com> - 2.11-33
- the stored archive in testsuite has little endian headers, expect also
'reversed byte-order' warning on big-endian
* Wed Dec 03 2014 Pavel Raiskup <praiskup@redhat.com> - 2.11-32 * Wed Dec 03 2014 Pavel Raiskup <praiskup@redhat.com> - 2.11-32
- adjust the testsuite fix for CVE-2014-9112 (#1167573) - adjust the testsuite fix for CVE-2014-9112 (#1167573)
- put the testsuite.log to standard output if make check fails - put the testsuite.log to standard output if make check fails