From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 24067 invoked from network); 16 Aug 2022 19:10:51 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 16 Aug 2022 19:10:51 -0000 Content-Type: multipart/mixed; boundary="===============8814434409144025315==" MIME-Version: 1.0 Subject: =?utf8?q?Re=3A_=5BPR_PATCH=5D_=5BUpdated=5D__busybox=3A_revbump_and_added_patches_for_CVE-2022-28391_?= To: ml@inbox.vuxu.org From: Sigmw Reply-to: ml@inbox.vuxu.org In-Reply-To: References: Date: Tue, 16 Aug 2022 21:10:51 +0200 List-Id: Message-ID: <20220816191051.ZUGbu09afzajDzyhJG0hLR8hmbcz1eJLb4Ubj9QcHlo@z> GitHub notification mails are now in MIME to allow UTF8. --===============8814434409144025315== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlcmUgaXMgYW4gdXBkYXRlZCBwdWxsIHJlcXVlc3QgYnkgU2lnbXcgYWdhaW5zdCBtYXN0ZXIg b24gdGhlIHZvaWQtcGFja2FnZXMgcmVwb3NpdG9yeQoKaHR0cHM6Ly9naXRodWIuY29tL1NpZ213 L3ZvaWQtcGFja2FnZXMgYnVzeWJveApodHRwczovL2dpdGh1Yi5jb20vdm9pZC1saW51eC92b2lk LXBhY2thZ2VzL3B1bGwvMzg3MjIKCiBidXN5Ym94OiByZXZidW1wIGFuZCBhZGRlZCBwYXRjaGVz IGZvciBDVkUtMjAyMi0yODM5MSAKPCEtLSBVbmNvbW1lbnQgcmVsZXZhbnQgc2VjdGlvbnMgYW5k IGRlbGV0ZSBvcHRpb25zIHdoaWNoIGFyZSBub3QgYXBwbGljYWJsZSAtLT4NCg0KIyMjIyBUZXN0 aW5nIHRoZSBjaGFuZ2VzDQotIEkgdGVzdGVkIHRoZSBjaGFuZ2VzIGluIHRoaXMgUFI6ICoqWUVT KioNCi0gVGhpcyB0d28gcGF0Y2hlcyBhcmUgbm90IHVwc3RyZWFtLCBtYWRlIGJ5IEFscGluZSBM aW51eCBUZWFtLCBidXQgdGhleSBhcmUgcmVwb3J0ZWQgaW4gaHR0cHM6Ly9idWdzLmJ1c3lib3gu bmV0L3Nob3dfYnVnLmNnaT9pZD0xNDgxMQ0KLSBTb3VyY2U6IGh0dHBzOi8vZ2l0LmFscGluZWxp bnV4Lm9yZy9hcG9ydHMvcGxhaW4vbWFpbi9idXN5Ym94LzAwMDItbnNsb29rdXAtc2FuaXRpemUt YWxsLXByaW50ZWQtc3RyaW5ncy13aXRoLXByaW50YWJsZS5wYXRjaA0KLSBTb3VyY2U6ICBodHRw czovL2dpdC5hbHBpbmVsaW51eC5vcmcvYXBvcnRzL3BsYWluL21haW4vYnVzeWJveC8wMDAxLWxp YmJiLXNvY2thZGRyMnN0ci1lbnN1cmUtb25seS1wcmludGFibGUtY2hhcmFjdGVycy0ucGF0Y2gN Ci0gQ2hlY2sgQ1ZFOiBodHRwczovL2N2ZS5taXRyZS5vcmcvY2dpLWJpbi9jdmVuYW1lLmNnaT9u YW1lPUNWRS0yMDIyLTI4MzkxDQo8IS0tDQojIyMjIE5ldyBwYWNrYWdlDQotIFRoaXMgbmV3IHBh Y2thZ2UgY29uZm9ybXMgdG8gdGhlIFtwYWNrYWdlIHJlcXVpcmVtZW50c10oaHR0cHM6Ly9naXRo dWIuY29tL3ZvaWQtbGludXgvdm9pZC1wYWNrYWdlcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcu bWQjcGFja2FnZS1yZXF1aXJlbWVudHMpOiAqKllFUyoqfCoqTk8qKg0KLS0+DQoNCjwhLS0gTm90 ZTogSWYgdGhlIGJ1aWxkIGlzIGxpa2VseSB0byB0YWtlIG1vcmUgdGhhbiAyIGhvdXJzLCBwbGVh c2UgYWRkIGNpIHNraXAgdGFnIGFzIGRlc2NyaWJlZCBpbg0KaHR0cHM6Ly9naXRodWIuY29tL3Zv aWQtbGludXgvdm9pZC1wYWNrYWdlcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQjY29udGlu dW91cy1pbnRlZ3JhdGlvbg0KYW5kIHRlc3QgYXQgbGVhc3Qgb25lIG5hdGl2ZSBidWlsZCBhbmQs IGlmIHN1cHBvcnRlZCwgYXQgbGVhc3Qgb25lIGNyb3NzIGJ1aWxkLg0KSWdub3JlIHRoaXMgc2Vj dGlvbiBpZiB0aGlzIFBSIGlzIG5vdCBza2lwcGluZyBDSS4NCi0tPg0KPCEtLQ0KIyMjIyBMb2Nh bCBidWlsZCB0ZXN0aW5nDQotIEkgYnVpbHQgdGhpcyBQUiBsb2NhbGx5IGZvciBteSBuYXRpdmUg YXJjaGl0ZWN0dXJlLCAoQVJDSC1MSUJDKQ0KLSBJIGJ1aWx0IHRoaXMgUFIgbG9jYWxseSBmb3Ig dGhlc2UgYXJjaGl0ZWN0dXJlcyAoaWYgc3VwcG9ydGVkLiBtYXJrIGNyb3NzYnVpbGRzKToNCiAg LSBhYXJjaDY0LW11c2wNCiAgLSBhcm12N2wNCiAgLSBhcm12NmwtbXVzbA0KLS0+DQoKCkEgcGF0 Y2ggZmlsZSBmcm9tIGh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQtcGFja2FnZXMv cHVsbC8zODcyMi5wYXRjaCBpcyBhdHRhY2hlZA== --===============8814434409144025315== Content-Type: text/x-diff MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="github-pr-busybox-38722.patch" RnJvbSBjZDFlNTc2YjNhNDkwOGY5ZTllOGZlZmU3OGIzZmI1NWQ5ZDkwNDQxIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBMdWNhcyBSb2JlcnRvIDxzaWdtd0Bwcm90b25tYWlsLmNvbT4K RGF0ZTogVHVlLCAxNiBBdWcgMjAyMiAxNTo1NToyMSAtMDMwMApTdWJqZWN0OiBbUEFUQ0hdIGJ1 c3lib3g6IHJldmJ1bXAgYW5kIGFkZGVkIHBhdGNoZXMgZm9yIENWRS0yMDIyLTI4MzkxCgotLS0K IC4uLnRyLWVuc3VyZS1vbmx5LXByaW50YWJsZS1jaGFyYWN0ZXJzLS5wYXRjaCB8IDQwICsrKysr KysrKysrCiAuLi5lLWFsbC1wcmludGVkLXN0cmluZ3Mtd2l0aC1wcmludGFibGUucGF0Y2ggfCA2 NyArKysrKysrKysrKysrKysrKysrCiBzcmNwa2dzL2J1c3lib3gvdGVtcGxhdGUgICAgICAgICAg ICAgICAgICAgICAgfCAgMiArLQogMyBmaWxlcyBjaGFuZ2VkLCAxMDggaW5zZXJ0aW9ucygrKSwg MSBkZWxldGlvbigtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IHNyY3BrZ3MvYnVzeWJveC9wYXRjaGVz LzAwMDEtbGliYmItc29ja2FkZHIyc3RyLWVuc3VyZS1vbmx5LXByaW50YWJsZS1jaGFyYWN0ZXJz LS5wYXRjaAogY3JlYXRlIG1vZGUgMTAwNjQ0IHNyY3BrZ3MvYnVzeWJveC9wYXRjaGVzLzAwMDIt bnNsb29rdXAtc2FuaXRpemUtYWxsLXByaW50ZWQtc3RyaW5ncy13aXRoLXByaW50YWJsZS5wYXRj aAoKZGlmZiAtLWdpdCBhL3NyY3BrZ3MvYnVzeWJveC9wYXRjaGVzLzAwMDEtbGliYmItc29ja2Fk ZHIyc3RyLWVuc3VyZS1vbmx5LXByaW50YWJsZS1jaGFyYWN0ZXJzLS5wYXRjaCBiL3NyY3BrZ3Mv YnVzeWJveC9wYXRjaGVzLzAwMDEtbGliYmItc29ja2FkZHIyc3RyLWVuc3VyZS1vbmx5LXByaW50 YWJsZS1jaGFyYWN0ZXJzLS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAw MDAwMDAuLjFkMTcxNmUzYjBjMQotLS0gL2Rldi9udWxsCisrKyBiL3NyY3BrZ3MvYnVzeWJveC9w YXRjaGVzLzAwMDEtbGliYmItc29ja2FkZHIyc3RyLWVuc3VyZS1vbmx5LXByaW50YWJsZS1jaGFy YWN0ZXJzLS5wYXRjaApAQCAtMCwwICsxLDQwIEBACitGcm9tIDBjOGRhMWJlYWQ4ZmZhZjI3MGI0 YjcyM2VhZDJjNTE3MzcxNDA1ZDcgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBBcmlh ZG5lIENvbmlsbCA8YXJpYWRuZUBkZXJlZmVyZW5jZWQub3JnPgorRGF0ZTogU3VuLCAzIEFwciAy MDIyIDEyOjE0OjMzICswMDAwCitTdWJqZWN0OiBbUEFUQ0ggMS8yXSBsaWJiYjogc29ja2FkZHIy c3RyOiBlbnN1cmUgb25seSBwcmludGFibGUgY2hhcmFjdGVycyBhcmUKKyByZXR1cm5lZCBmb3Ig dGhlIGhvc3RuYW1lIHBhcnQKKworQ1ZFOiBQZW5kaW5nCitVcHN0cmVhbS1TdGF0dXM6IFBlbmRp bmcKK1NpZ25lZC1vZmYtYnk6IEFyaWFkbmUgQ29uaWxsIDxhcmlhZG5lQGRlcmVmZXJlbmNlZC5v cmc+CistLS0KKyBsaWJiYi94Y29ubmVjdC5jIHwgNSArKystLQorIDEgZmlsZSBjaGFuZ2VkLCAz IGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCisKK2RpZmYgLS1naXQgYS9saWJiYi94Y29u bmVjdC5jIGIvbGliYmIveGNvbm5lY3QuYworaW5kZXggMGUwYjI0N2I4Li4wMmMwNjFlNjcgMTAw NjQ0CistLS0gYS9saWJiYi94Y29ubmVjdC5jCisrKysgYi9saWJiYi94Y29ubmVjdC5jCitAQCAt NDk3LDggKzQ5Nyw5IEBAIHN0YXRpYyBjaGFyKiBGQVNUX0ZVTkMgc29ja2FkZHIyc3RyKGNvbnN0 IHN0cnVjdCBzb2NrYWRkciAqc2EsIGludCBmbGFncykKKyAJKTsKKyAJaWYgKHJjKQorIAkJcmV0 dXJuIE5VTEw7CisrCS8qIGVuc3VyZSBob3N0IGNvbnRhaW5zIG9ubHkgcHJpbnRhYmxlIGNoYXJh Y3RlcnMgKi8KKyAJaWYgKGZsYWdzICYgSUdOT1JFX1BPUlQpCistCQlyZXR1cm4geHN0cmR1cCho b3N0KTsKKysJCXJldHVybiB4c3RyZHVwKHByaW50YWJsZV9zdHJpbmcoaG9zdCkpOworICNpZiBF TkFCTEVfRkVBVFVSRV9JUFY2CisgCWlmIChzYS0+c2FfZmFtaWx5ID09IEFGX0lORVQ2KSB7Cisg CQlpZiAoc3RyY2hyKGhvc3QsICc6JykpIC8qIGhlaCwgaXQncyBub3QgYSByZXNvbHZlZCBob3N0 bmFtZSAqLworQEAgLTUwOSw3ICs1MTAsNyBAQCBzdGF0aWMgY2hhciogRkFTVF9GVU5DIHNvY2th ZGRyMnN0cihjb25zdCBzdHJ1Y3Qgc29ja2FkZHIgKnNhLCBpbnQgZmxhZ3MpCisgI2VuZGlmCisg CS8qIEZvciBub3cgd2UgZG9uJ3Qgc3VwcG9ydCBhbnl0aGluZyBlbHNlLCBzbyBpdCBoYXMgdG8g YmUgSU5FVCAqLworIAkvKmlmIChzYS0+c2FfZmFtaWx5ID09IEFGX0lORVQpKi8KKy0JCXJldHVy biB4YXNwcmludGYoIiVzOiVzIiwgaG9zdCwgc2Vydik7CisrCQlyZXR1cm4geGFzcHJpbnRmKCIl czolcyIsIHByaW50YWJsZV9zdHJpbmcoaG9zdCksIHNlcnYpOworIAkvKnJldHVybiB4c3RyZHVw KGhvc3QpOyovCisgfQorIAorLS0gCisyLjM1LjEKKwpkaWZmIC0tZ2l0IGEvc3JjcGtncy9idXN5 Ym94L3BhdGNoZXMvMDAwMi1uc2xvb2t1cC1zYW5pdGl6ZS1hbGwtcHJpbnRlZC1zdHJpbmdzLXdp dGgtcHJpbnRhYmxlLnBhdGNoIGIvc3JjcGtncy9idXN5Ym94L3BhdGNoZXMvMDAwMi1uc2xvb2t1 cC1zYW5pdGl6ZS1hbGwtcHJpbnRlZC1zdHJpbmdzLXdpdGgtcHJpbnRhYmxlLnBhdGNoCm5ldyBm aWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMC4uNDc1ODUwOTY0YTBmCi0tLSAvZGV2 L251bGwKKysrIGIvc3JjcGtncy9idXN5Ym94L3BhdGNoZXMvMDAwMi1uc2xvb2t1cC1zYW5pdGl6 ZS1hbGwtcHJpbnRlZC1zdHJpbmdzLXdpdGgtcHJpbnRhYmxlLnBhdGNoCkBAIC0wLDAgKzEsNjcg QEAKK0Zyb20gODEyYjQwN2U1NDViNzBiMTZjZjMyYWFkZTEzNWI1YzMyZWFmNjc0ZiBNb24gU2Vw IDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IEFyaWFkbmUgQ29uaWxsIDxhcmlhZG5lQGRlcmVmZXJl bmNlZC5vcmc+CitEYXRlOiBTdW4sIDMgQXByIDIwMjIgMTI6MTY6NDUgKzAwMDAKK1N1YmplY3Q6 IFtQQVRDSCAyLzJdIG5zbG9va3VwOiBzYW5pdGl6ZSBhbGwgcHJpbnRlZCBzdHJpbmdzIHdpdGgK KyBwcmludGFibGVfc3RyaW5nCisKK090aGVyd2lzZSwgdGVybWluYWwgc2VxdWVuY2VzIGNhbiBi ZSBpbmplY3RlZCwgd2hpY2ggZW5hYmxlcyB2YXJpb3VzIHRlcm1pbmFsIGluamVjdGlvbgorYXR0 YWNrcyBmcm9tIEROUyByZXN1bHRzLgorCitDVkU6IFBlbmRpbmcKK1Vwc3RyZWFtLVN0YXR1czog UGVuZGluZworU2lnbmVkLW9mZi1ieTogQXJpYWRuZSBDb25pbGwgPGFyaWFkbmVAZGVyZWZlcmVu Y2VkLm9yZz4KKy0tLQorIG5ldHdvcmtpbmcvbnNsb29rdXAuYyB8IDEwICsrKysrLS0tLS0KKyAx IGZpbGUgY2hhbmdlZCwgNSBpbnNlcnRpb25zKCspLCA1IGRlbGV0aW9ucygtKQorCitkaWZmIC0t Z2l0IGEvbmV0d29ya2luZy9uc2xvb2t1cC5jIGIvbmV0d29ya2luZy9uc2xvb2t1cC5jCitpbmRl eCA2ZGE5N2JhZjQuLjRiZGNkZTFiOCAxMDA2NDQKKy0tLSBhL25ldHdvcmtpbmcvbnNsb29rdXAu YworKysrIGIvbmV0d29ya2luZy9uc2xvb2t1cC5jCitAQCAtNDA3LDcgKzQwNyw3IEBAIHN0YXRp YyBOT0lOTElORSBpbnQgcGFyc2VfcmVwbHkoY29uc3QgdW5zaWduZWQgY2hhciAqbXNnLCBzaXpl X3QgbGVuKQorIAkJCQkvL3ByaW50ZigiVW5hYmxlIHRvIHVuY29tcHJlc3MgZG9tYWluOiAlc1xu Iiwgc3RyZXJyb3IoZXJybm8pKTsKKyAJCQkJcmV0dXJuIC0xOworIAkJCX0KKy0JCQlwcmludGYo Zm9ybWF0LCBuc19ycl9uYW1lKHJyKSwgZG5hbWUpOworKwkJCXByaW50Zihmb3JtYXQsIG5zX3Jy X25hbWUocnIpLCBwcmludGFibGVfc3RyaW5nKGRuYW1lKSk7CisgCQkJYnJlYWs7CisgCisgCQlj YXNlIG5zX3RfbXg6CitAQCAtNDIyLDcgKzQyMiw3IEBAIHN0YXRpYyBOT0lOTElORSBpbnQgcGFy c2VfcmVwbHkoY29uc3QgdW5zaWduZWQgY2hhciAqbXNnLCBzaXplX3QgbGVuKQorIAkJCQkvL3By aW50ZigiQ2Fubm90IHVuY29tcHJlc3MgTVggZG9tYWluOiAlc1xuIiwgc3RyZXJyb3IoZXJybm8p KTsKKyAJCQkJcmV0dXJuIC0xOworIAkJCX0KKy0JCQlwcmludGYoIiVzXHRtYWlsIGV4Y2hhbmdl ciA9ICVkICVzXG4iLCBuc19ycl9uYW1lKHJyKSwgbiwgZG5hbWUpOworKwkJCXByaW50ZigiJXNc dG1haWwgZXhjaGFuZ2VyID0gJWQgJXNcbiIsIG5zX3JyX25hbWUocnIpLCBuLCBwcmludGFibGVf c3RyaW5nKGRuYW1lKSk7CisgCQkJYnJlYWs7CisgCisgCQljYXNlIG5zX3RfdHh0OgorQEAgLTQz NCw3ICs0MzQsNyBAQCBzdGF0aWMgTk9JTkxJTkUgaW50IHBhcnNlX3JlcGx5KGNvbnN0IHVuc2ln bmVkIGNoYXIgKm1zZywgc2l6ZV90IGxlbikKKyAJCQlpZiAobiA+IDApIHsKKyAJCQkJbWVtc2V0 KGRuYW1lLCAwLCBzaXplb2YoZG5hbWUpKTsKKyAJCQkJbWVtY3B5KGRuYW1lLCBuc19ycl9yZGF0 YShycikgKyAxLCBuKTsKKy0JCQkJcHJpbnRmKCIlc1x0dGV4dCA9IFwiJXNcIlxuIiwgbnNfcnJf bmFtZShyciksIGRuYW1lKTsKKysJCQkJcHJpbnRmKCIlc1x0dGV4dCA9IFwiJXNcIlxuIiwgbnNf cnJfbmFtZShyciksIHByaW50YWJsZV9zdHJpbmcoZG5hbWUpKTsKKyAJCQl9CisgCQkJYnJlYWs7 CisgCitAQCAtNDU0LDcgKzQ1NCw3IEBAIHN0YXRpYyBOT0lOTElORSBpbnQgcGFyc2VfcmVwbHko Y29uc3QgdW5zaWduZWQgY2hhciAqbXNnLCBzaXplX3QgbGVuKQorIAkJCX0KKyAKKyAJCQlwcmlu dGYoIiVzXHRzZXJ2aWNlID0gJXUgJXUgJXUgJXNcbiIsIG5zX3JyX25hbWUocnIpLAorLQkJCQlu c19nZXQxNihjcCksIG5zX2dldDE2KGNwICsgMiksIG5zX2dldDE2KGNwICsgNCksIGRuYW1lKTsK KysJCQkJbnNfZ2V0MTYoY3ApLCBuc19nZXQxNihjcCArIDIpLCBuc19nZXQxNihjcCArIDQpLCBw cmludGFibGVfc3RyaW5nKGRuYW1lKSk7CisgCQkJYnJlYWs7CisgCisgCQljYXNlIG5zX3Rfc29h OgorQEAgLTQ4Myw3ICs0ODMsNyBAQCBzdGF0aWMgTk9JTkxJTkUgaW50IHBhcnNlX3JlcGx5KGNv bnN0IHVuc2lnbmVkIGNoYXIgKm1zZywgc2l6ZV90IGxlbikKKyAJCQkJcmV0dXJuIC0xOworIAkJ CX0KKyAKKy0JCQlwcmludGYoIlx0bWFpbCBhZGRyID0gJXNcbiIsIGRuYW1lKTsKKysJCQlwcmlu dGYoIlx0bWFpbCBhZGRyID0gJXNcbiIsIHByaW50YWJsZV9zdHJpbmcoZG5hbWUpKTsKKyAJCQlj cCArPSBuOworIAorIAkJCXByaW50ZigiXHRzZXJpYWwgPSAlbHVcbiIsIG5zX2dldDMyKGNwKSk7 CistLSAKKzIuMzUuMQpkaWZmIC0tZ2l0IGEvc3JjcGtncy9idXN5Ym94L3RlbXBsYXRlIGIvc3Jj cGtncy9idXN5Ym94L3RlbXBsYXRlCmluZGV4IGRmNTI2MmQyNGM4OC4uN2Y1ZjI5ZDJmZjYwIDEw MDY0NAotLS0gYS9zcmNwa2dzL2J1c3lib3gvdGVtcGxhdGUKKysrIGIvc3JjcGtncy9idXN5Ym94 L3RlbXBsYXRlCkBAIC0xLDcgKzEsNyBAQAogIyBUZW1wbGF0ZSBmaWxlIGZvciAnYnVzeWJveCcK IHBrZ25hbWU9YnVzeWJveAogdmVyc2lvbj0xLjM0LjEKLXJldmlzaW9uPTEKK3JldmlzaW9uPTIK IGhvc3RtYWtlZGVwZW5kcz0icGVybCIKIGNoZWNrZGVwZW5kcz0idGFyIHdoaWNoIHppcCIKIHNo b3J0X2Rlc2M9IlN3aXNzIEFybXkgS25pZmUgb2YgRW1iZWRkZWQgTGludXgiCg== --===============8814434409144025315==--