mbox series

[kirkstone,0/1] Fix kirkstone dmidedecode smbios3_decode

Message ID 20230815095122.188614-1-adrian.freihofer@siemens.com
Headers show
Series Fix kirkstone dmidedecode smbios3_decode | expand

Message

Adrian Freihofer Aug. 15, 2023, 9:50 a.m. UTC
I can confirm that demidecode does not currently work in the kirkstone
branch. dmidecode does not output any fields (tested in Qemu). With this
fix, the fields are back.

Instead of trying to change the code, this implementation simply chooses
to add another refactoring patch from the upstream repository. This allows
to cherry-pick all 5 patches without resolving conflicts.

Adrian Freihofer (1):
  dmidecode: fixup for CVE-2023-30630

 .../dmidecode/CVE-2023-30630_1.patch          | 397 +++++++++---------
 .../dmidecode/CVE-2023-30630_2.patch          | 229 +++++++---
 .../dmidecode/CVE-2023-30630_3.patch          | 122 +++---
 .../dmidecode/CVE-2023-30630_4.patch          | 174 +++-----
 .../dmidecode/CVE-2023-30630_5.patch          | 138 ++++++
 5 files changed, 631 insertions(+), 429 deletions(-)
 create mode 100644 meta/recipes-devtools/dmidecode/dmidecode/CVE-2023-30630_5.patch

Comments

Lau, Karn Jye Aug. 16, 2023, 2:35 a.m. UTC | #1
Tested the fix in intel hw platform, LGTM.
May i know what is the purposeĀ  of meta/recipes-devtools/dmidecode/dmidecode/CVE-2023-30630_5.patch?
Do we need to include in dmidecode_3.3.bb?

Thx,
KJ