[hardknott,08/14] gmp: fix CVE-2021-43618

Message ID	ebf1a7c42a9bd5a9d583248af95e0a30fa241465.1638342222.git.anuj.mittal@intel.com
State	Accepted, archived
Commit	ebf1a7c42a9bd5a9d583248af95e0a30fa241465
Headers	show Return-Path: <anuj.mittal@intel.com> ip: 134.134.136.65, mailfrom: anuj.mittal@intel.com) From: Anuj Mittal <anuj.mittal@intel.com> To: openembedded-core@lists.openembedded.org Subject: [hardknott][PATCH 08/14] gmp: fix CVE-2021-43618 Date: Wed, 1 Dec 2021 15:16:08 +0800 Message-Id: <ebf1a7c42a9bd5a9d583248af95e0a30fa241465.1638342222.git.anuj.mittal@intel.com> In-Reply-To: <cover.1638342222.git.anuj.mittal@intel.com> References: <cover.1638342222.git.anuj.mittal@intel.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[hardknott,01/14] linux-yocto/5.4: update to v5.4.154 \| expand [hardknott,01/14] linux-yocto/5.4: update to v5.4.154 [hardknott,02/14] linux-yocto/5.4: update to v5.4.155 [hardknott,03/14] linux-yocto/5.4: update to v5.4.156 [hardknott,04/14] linux-yocto/5.4: update to v5.4.158 [hardknott,05/14] go: upgrade 1.16.8 -> 1.16.10 [hardknott,06/14] uninative: Add version to uninative tarball name [hardknott,07/14] wic: use shutil.which [hardknott,08/14] gmp: fix CVE-2021-43618 [hardknott,09/14] glibc: Fix i586/c3 support [hardknott,10/14] linux-yocto/5.10: update to v5.10.79 [hardknott,11/14] os-release: Add DISTRO_CODENAME as vardeps for do_compile [hardknott,12/14] python3: upgrade 3.9.5 -> 3.9.6 [hardknott,13/14] python3: update to 3.9.7 [hardknott,14/14] cups: Fix missing installation of cups sysv init scripts

Message ID

ebf1a7c42a9bd5a9d583248af95e0a30fa241465.1638342222.git.anuj.mittal@intel.com

State

Accepted, archived

Commit

ebf1a7c42a9bd5a9d583248af95e0a30fa241465

Headers

From: Anuj Mittal <anuj.mittal@intel.com>
To: openembedded-core@lists.openembedded.org
Subject: [hardknott][PATCH 08/14] gmp: fix CVE-2021-43618
Date: Wed,  1 Dec 2021 15:16:08 +0800
Message-Id: 
 <ebf1a7c42a9bd5a9d583248af95e0a30fa241465.1638342222.git.anuj.mittal@intel.com>
In-Reply-To: <cover.1638342222.git.anuj.mittal@intel.com>
References: <cover.1638342222.git.anuj.mittal@intel.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[hardknott,01/14] linux-yocto/5.4: update to v5.4.154 | expand

Commit Message

Mittal, Anuj Dec. 1, 2021, 7:16 a.m. UTC

From: Ross Burton <ross@burtonini.com>

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fb3b9a7f668a6ffd56a99e1e8b83cdbad2a4bc66)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
---
 .../gmp/gmp/cve-2021-43618.patch              | 27 +++++++++++++++++++
 meta/recipes-support/gmp/gmp_6.2.1.bb         |  1 +
 2 files changed, 28 insertions(+)
 create mode 100644 meta/recipes-support/gmp/gmp/cve-2021-43618.patch

diff --git a/meta/recipes-support/gmp/gmp/cve-2021-43618.patch b/meta/recipes-support/gmp/gmp/cve-2021-43618.patch
new file mode 100644
index 0000000000..095fb21eaa
--- /dev/null
+++ b/meta/recipes-support/gmp/gmp/cve-2021-43618.patch
@@ -0,0 +1,27 @@ 
+CVE: CVE-2021-43618
+Upstream-Status: Backport
+Signed-off-by: Ross Burton <ross.burton@arm.com>
+
+# HG changeset patch
+# User Marco Bodrato <bodrato@mail.dm.unipi.it>
+# Date 1634836009 -7200
+# Node ID 561a9c25298e17bb01896801ff353546c6923dbd
+# Parent  e1fd9db13b475209a864577237ea4b9105b3e96e
+mpz/inp_raw.c: Avoid bit size overflows
+
+diff -r e1fd9db13b47 -r 561a9c25298e mpz/inp_raw.c
+--- a/mpz/inp_raw.c	Tue Dec 22 23:49:51 2020 +0100
++++ b/mpz/inp_raw.c	Thu Oct 21 19:06:49 2021 +0200
+@@ -88,8 +88,11 @@
+ 
+   abs_csize = ABS (csize);
+ 
++  if (UNLIKELY (abs_csize > ~(mp_bitcnt_t) 0 / 8))
++    return 0; /* Bit size overflows */
++
+   /* round up to a multiple of limbs */
+-  abs_xsize = BITS_TO_LIMBS (abs_csize*8);
++  abs_xsize = BITS_TO_LIMBS ((mp_bitcnt_t) abs_csize * 8);
+ 
+   if (abs_xsize != 0)
+     {
diff --git a/meta/recipes-support/gmp/gmp_6.2.1.bb b/meta/recipes-support/gmp/gmp_6.2.1.bb
index 3c50f928ab..f97c588c31 100644
--- a/meta/recipes-support/gmp/gmp_6.2.1.bb
+++ b/meta/recipes-support/gmp/gmp_6.2.1.bb
@@ -12,6 +12,7 @@  SRC_URI = "https://gmplib.org/download/${BPN}/${BP}${REVISION}.tar.bz2 \
            file://use-includedir.patch \
            file://0001-Append-the-user-provided-flags-to-the-auto-detected-.patch \
            file://0001-confiure.ac-Believe-the-cflags-from-environment.patch \
+           file://cve-2021-43618.patch \
            "
 SRC_URI[md5sum] = "28971fc21cf028042d4897f02fd355ea"
 SRC_URI[sha256sum] = "eae9326beb4158c386e39a356818031bd28f3124cf915f8c5b1dc4c7a36b4d7c"

[hardknott,08/14] gmp: fix CVE-2021-43618

Commit Message

Patch