Fabrice Fontaine 43df60902c package/tinyxml: fix CVE-2021-42260 ...

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in
tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by
a crafted XML message and leads to a denial of service.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b23ef21029)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2022-01-28 21:44:07 +01:00

..

0001-In-stamp-always-advance-the-pointer-if-p-0xef.patch

…

Config.in

…

tinyxml.hash

…

tinyxml.mk

…