binutils: Security fix for CVE-2017-17123

From: Armin Kuster <[email protected]>

Affects: <= 2.29.1

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2017-17123.patch         | 33 ++++++++++++++++++++++
 2 files changed, 34 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2017-17123.patch

index f80b59a..8fe897e 100644
@@ -64,6 +64,7 @@ SRC_URI = "\
      file://CVE-2017-17121.patch \
      file://CVE-2017-17122.patch \
      file://CVE-2017-17125.patch \
+     file://CVE-2017-17123.patch \
 "
 S  = "${WORKDIR}/git"
 

new file mode 100644
index 0000000..0841210
@@ -0,0 +1,33 @@
+From 4581a1c7d304ce14e714b27522ebf3d0188d6543 Mon Sep 17 00:00:00 2001
+From: Nick Clifton <[email protected]>
+Date: Wed, 29 Nov 2017 17:12:12 +0000
+Subject: [PATCH] Check for a NULL symbol pointer when reading relocs from a
+ COFF based file.
+
+	PR 22509
+	* coffcode.h (coff_slurp_reloc_table): Check for a NULL symbol
+	pointer when processing relocs.
+
+Upstream-Status: Backport
+Affects: <= 2.29.1
+CVE: CVE-2017-17123
+Signed-off-by: Armin Kuster <[email protected]>
+
+---
+ bfd/ChangeLog  | 6 ++++++
+ bfd/coffcode.h | 2 +-
+ 2 files changed, 7 insertions(+), 1 deletion(-)
+
+Index: git/bfd/coffcode.h
+===================================================================
+--- git.orig/bfd/coffcode.h
++++ git/bfd/coffcode.h
+@@ -5326,7 +5326,7 @@ coff_slurp_reloc_table (bfd * abfd, sec_
+ #else
+       cache_ptr->address = dst.r_vaddr;
+ 
+-      if (dst.r_symndx != -1)
++      if (dst.r_symndx != -1 && symbols != NULL)
+ 	{
+ 	  if (dst.r_symndx < 0 || dst.r_symndx >= obj_conv_table_size (abfd))
+ 	    {

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2018-10372.patch         | 58 ++++++++++++++++++++++
 2 files changed, 59 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-10372.patch

index 8fe897e..7830b87 100644
@@ -65,6 +65,7 @@ SRC_URI = "\
      file://CVE-2017-17122.patch \
      file://CVE-2017-17125.patch \
      file://CVE-2017-17123.patch \
+     file://CVE-2018-10372.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2018-10373.patch         | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-10373.patch

index 7830b87..1916743 100644
@@ -66,6 +66,7 @@ SRC_URI = "\
      file://CVE-2017-17125.patch \
      file://CVE-2017-17123.patch \
      file://CVE-2018-10372.patch \
+     file://CVE-2018-10373.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |    1 +
 .../binutils/binutils/CVE-2018-10534.patch         | 2443 ++++++++++++++++++++
 2 files changed, 2444 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-10534.patch

index 1916743..ab61745 100644
@@ -67,6 +67,7 @@ SRC_URI = "\
      file://CVE-2017-17123.patch \
      file://CVE-2018-10372.patch \
      file://CVE-2018-10373.patch \
+     file://CVE-2018-10534.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2018-10535.patch         | 63 ++++++++++++++++++++++
 2 files changed, 64 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-10535.patch

index ab61745..4d9983b 100644
@@ -68,6 +68,7 @@ SRC_URI = "\
      file://CVE-2018-10372.patch \
      file://CVE-2018-10373.patch \
      file://CVE-2018-10534.patch \
+     file://CVE-2018-10535.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2018-13033.patch         | 71 ++++++++++++++++++++++
 2 files changed, 72 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-13033.patch

index 4d9983b..2f9b4fe 100644
@@ -69,6 +69,7 @@ SRC_URI = "\
      file://CVE-2018-10373.patch \
      file://CVE-2018-10534.patch \
      file://CVE-2018-10535.patch \
+     file://CVE-2018-13033.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affected: <= 2.29.1

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2018-6323.patch          | 55 ++++++++++++++++++++++
 2 files changed, 56 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-6323.patch

index 2f9b4fe..db7305a 100644
@@ -70,6 +70,7 @@ SRC_URI = "\
      file://CVE-2018-10534.patch \
      file://CVE-2018-10535.patch \
      file://CVE-2018-13033.patch \
+     file://CVE-2018-6323.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   1 +
 .../binutils/binutils/CVE-2018-6759.patch          | 108 +++++++++++++++++++++
 2 files changed, 109 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-6759.patch

index db7305a..c668e63 100644
@@ -71,6 +71,7 @@ SRC_URI = "\
      file://CVE-2018-10535.patch \
      file://CVE-2018-13033.patch \
      file://CVE-2018-6323.patch \
+     file://CVE-2018-6759.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2018-7208.patch          | 47 ++++++++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-7208.patch

index c668e63..13389a1 100644
@@ -72,6 +72,7 @@ SRC_URI = "\
      file://CVE-2018-13033.patch \
      file://CVE-2018-6323.patch \
      file://CVE-2018-6759.patch \
+     file://CVE-2018-7208.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   2 +
 .../binutils/binutils/CVE-2018-7568_p1.patch       | 161 +++++++++++++++++++++
 .../binutils/binutils/CVE-2018-7568_p2.patch       |  73 ++++++++++
 3 files changed, 236 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-7568_p1.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-7568_p2.patch

index 13389a1..ceb8e85 100644
@@ -73,6 +73,8 @@ SRC_URI = "\
      file://CVE-2018-6323.patch \
      file://CVE-2018-6759.patch \
      file://CVE-2018-7208.patch \
+     file://CVE-2018-7568_p1.patch \
+     file://CVE-2018-7568_p2.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |   1 +
 .../binutils/binutils/CVE-2018-7569.patch          | 120 +++++++++++++++++++++
 2 files changed, 121 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-7569.patch

index ceb8e85..cfde35c 100644
@@ -75,6 +75,7 @@ SRC_URI = "\
      file://CVE-2018-7208.patch \
      file://CVE-2018-7568_p1.patch \
      file://CVE-2018-7568_p2.patch \
+     file://CVE-2018-7569.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

From: Armin Kuster <[email protected]>

Affects: <= 2.30

---
 meta/recipes-devtools/binutils/binutils-2.29.1.inc |  1 +
 .../binutils/binutils/CVE-2018-7642.patch          | 51 ++++++++++++++++++++++
 2 files changed, 52 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2018-7642.patch

index cfde35c..eccb128 100644
@@ -76,6 +76,7 @@ SRC_URI = "\
      file://CVE-2018-7568_p1.patch \
      file://CVE-2018-7568_p2.patch \
      file://CVE-2018-7569.patch \
+     file://CVE-2018-7642.patch \
 "
 S  = "${WORKDIR}/git"
 

2.7.4

== Series Details ==

Series: "[ROCKO] binutils: Security fix..." and 11 more
Revision: 1
URL : https://patchwork.openembedded.org/series/13433/
State : failure

== Summary ==

Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the proposed series by patchtest resulting in the following failures:

* Issue Series does not apply on top of target branch [test_series_merge_on_head]
Suggested fix Rebase your series on top of targeted branch
Targeted branch rocko (currently at 931a52e869)

If you believe any of these test results are incorrect, please reply to the mailing list ([email protected]) raising your concerns. Otherwise we would appreciate you correcting the issues and submitting a new version of the patchset if applicable. Please ensure you add/increment the version number when sending the new version (i.e. [PATCH] -> [PATCH v2] -> [PATCH v3] -> ...).

---

Guidelines:     https://www.openembedded.org/wiki/Commit_Patch_Message_Guidelines
Test framework: http://git.yoctoproject.org/cgit/cgit.cgi/patchtest
Test suite:     http://git.yoctoproject.org/cgit/cgit.cgi/patchtest-oe