Skip to content
Commit 203d62ef authored by Michael Catanzaro's avatar Michael Catanzaro Committed by Federico Mena Quintero
Browse files

libcroco parser: limit recursion in block and any productions 

If we don't have any limits, we can recurse forever and overflow the
stack.

This is for CVE-2020-12825: Stack overflow in cr_parser_parse_any_core
in cr-parser.c.

Bug: https://gitlab.gnome.org/Archive/libcroco/-/issues/8
Patch from https://gitlab.gnome.org/Archive/libcroco/-/merge_requests/5
parent fd3c0846
Pipeline #177826456 passed with stages
in 46 minutes and 24 seconds
Hide whitespace changes
Inline Side-by-side
  • Wade Berrier @wberrier

    mentioned in commit vivint-mirrors/meta-openembedded@fd3208ac7ea738e3177ad6d408e1d599b53fe7d7

     ·

    mentioned in commit vivint-mirrors/meta-openembedded@fd3208ac7ea738e3177ad6d408e1d599b53fe7d7

    Toggle commit list
  • Nathan Lee @nathanal

    mentioned in issue #2331 (closed)

     ·

    mentioned in issue #2331 (closed)

    Toggle commit list
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment