projects / buildroot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9675c3f) | patch
package/cairo: fix CVE-2018-19876
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Sat, 29 Feb 2020 20:00:16 +0000 (21:00 +0100)
committerPeter Korsgaard <peter@korsgaard.com>
Sat, 29 Feb 2020 22:17:29 +0000 (23:17 +0100)
commit91b150dc33841be13a2085d52c312dafe0b87767
treedd135334033647093a8497e4f375306af3024ccetree
parent9675c3fbe8791c6ba4a4163d7ca5d544145786dacommit | diff
package/cairo: fix CVE-2018-19876

Add an upstream patch to fix CVE-2018-19876: cairo 1.16.0, in
cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a
free function incompatible with WebKit's fastMalloc, leading to an
application crash with a "free(): invalid pointer" error.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Peter: extend commit message]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/cairo/0002-ft-Use-FT_Done_MM_Var-instead-of-free-when-available-in-cairo_ft_apply_variation.patch [new file with mode: 0644] blob
package/cairo/cairo.mk diff | blob | history