Browse code
Adding patch for CVE-2017-10989
Change-Id: I9380d9a87777fc0eb3b24474096cefa3b5277b38
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/3241
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Divya Thaluru <dthaluru@vmware.com>
DheerajSShetty authored on 2017/07/14 06:29:29Showing 2 changed files
| 1 | 1 |
new file mode 100644 |
| ... | ... |
@@ -0,0 +1,15 @@ |
| 0 |
+Only in a: config.log |
|
| 1 |
+diff -dupr a/sqlite3.c b/sqlite3.c |
|
| 2 |
+--- a/sqlite3.c 2017-03-30 07:26:48.000000000 -0700 |
|
| 3 |
+@@ -166892,6 +166892,10 @@ static int getNodeSize( |
|
| 4 |
+ rc = getIntFromStmt(db, zSql, &pRtree->iNodeSize); |
|
| 5 |
+ if( rc!=SQLITE_OK ){
|
|
| 6 |
+ *pzErr = sqlite3_mprintf("%s", sqlite3_errmsg(db));
|
|
| 7 |
++ }else if( pRtree->iNodeSize<(512-64) ){
|
|
| 8 |
++ rc = SQLITE_CORRUPT; |
|
| 9 |
++ *pzErr = sqlite3_mprintf("undersize RTree blobs in \"%q_node\"",
|
|
| 10 |
++ pRtree->zName); |
|
| 11 |
+ } |
|
| 12 |
+ } |
|
| 13 |
+ |
| ... | ... |
@@ -2,7 +2,7 @@ |
| 2 | 2 |
Summary: A portable, high level programming interface to various calling conventions |
| 3 | 3 |
Name: sqlite-autoconf |
| 4 | 4 |
Version: 3.18.0 |
| 5 |
-Release: 1%{?dist}
|
|
| 5 |
+Release: 2%{?dist}
|
|
| 6 | 6 |
License: Public Domain |
| 7 | 7 |
URL: http://www.sqlite.org |
| 8 | 8 |
Group: System Environment/GeneralLibraries |
| ... | ... |
@@ -10,6 +10,8 @@ Vendor: VMware, Inc. |
| 10 | 10 |
Distribution: Photon |
| 11 | 11 |
Source0: http://sqlite.org/2017/%{name}-3180000.tar.gz
|
| 12 | 12 |
%define sha1 sqlite=74559194e1dd9b9d577cac001c0e9d370856671b |
| 13 |
+#https://sqlite.org/src/vpatch?from=0db20efe201736b3&to=66de6f4a9504ec26 |
|
| 14 |
+Patch0: CVE-2017-10989.patch |
|
| 13 | 15 |
Obsoletes: libsqlite |
| 14 | 16 |
Provides: sqlite3 |
| 15 | 17 |
%description |
| ... | ... |
@@ -18,6 +20,8 @@ www.sqlite.org website including all of the SQL Syntax and the |
| 18 | 18 |
C/C++ interface specs and other miscellaneous documentation. |
| 19 | 19 |
%prep |
| 20 | 20 |
%setup -q -n %{name}-%{sourcever}
|
| 21 |
+%patch0 -p1 |
|
| 22 |
+ |
|
| 21 | 23 |
%build |
| 22 | 24 |
./configure \ |
| 23 | 25 |
CFLAGS="%{optflags}" \
|
| ... | ... |
@@ -51,6 +55,8 @@ rm -rf %{buildroot}/*
|
| 51 | 51 |
%{_libdir}/pkgconfig/*
|
| 52 | 52 |
%{_mandir}/man1/*
|
| 53 | 53 |
%changelog |
| 54 |
+* Thu Jul 13 2017 Dheeraj Shetty <dheerajs@vmware.com> 3.18.0-2 |
|
| 55 |
+- Adding patch for CVE-2017-10989 |
|
| 54 | 56 |
* Mon May 8 2017 Divya Thaluru <dthaluru@vmware.com> 3.18.0-1 |
| 55 | 57 |
- Updated to version 3.18.0 |
| 56 | 58 |
* Tue May 24 2016 Priyesh Padmavilasom <ppadmavilasom@vmware.com> 3.11.0-2 |