From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.2 required=5.0 tests=ALL_TRUSTED, DKIM_ADSP_NXDOMAIN autolearn=no autolearn_force=no version=3.4.4 Received: (qmail 15457 invoked from network); 2 Apr 2021 21:15:23 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 2 Apr 2021 21:15:23 -0000 Content-Type: multipart/mixed; boundary="===============2025985701742322168==" MIME-Version: 1.0 Subject: =?utf8?q?=5BPR_PATCH=5D_busybox=3A_add_upstream_patch_for_CVE-2021-28831?= To: ml@inbox.vuxu.org From: daniel-eys Reply-to: ml@inbox.vuxu.org Message-ID: Date: Fri, 02 Apr 2021 23:15:23 +0200 List-Id: GitHub notification mails are now in MIME to allow UTF8. --===============2025985701742322168== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlcmUgaXMgYSBuZXcgcHVsbCByZXF1ZXN0IGJ5IGRhbmllbC1leXMgYWdhaW5zdCBtYXN0ZXIg b24gdGhlIHZvaWQtcGFja2FnZXMgcmVwb3NpdG9yeQoKaHR0cHM6Ly9naXRodWIuY29tL2Rhbmll bC1leXMvdm9pZC1wYWNrYWdlcyBidXN5Ym94Cmh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4 L3ZvaWQtcGFja2FnZXMvcHVsbC8yOTk1NgoKYnVzeWJveDogYWRkIHVwc3RyZWFtIHBhdGNoIGZv ciBDVkUtMjAyMS0yODgzMQo8IS0tIE1hcmsgaXRlbXMgd2l0aCBbeF0gd2hlcmUgYXBwbGljYWJs ZSAtLT4KCiMjIyMgR2VuZXJhbAotIFsgXSBUaGlzIGlzIGEgbmV3IHBhY2thZ2UgYW5kIGl0IGNv bmZvcm1zIHRvIHRoZSBbcXVhbGl0eSByZXF1aXJlbWVudHNdKGh0dHBzOi8vZ2l0aHViLmNvbS92 b2lkLWxpbnV4L3ZvaWQtcGFja2FnZXMvYmxvYi9tYXN0ZXIvTWFudWFsLm1kI3F1YWxpdHktcmVx dWlyZW1lbnRzKQoKIyMjIyBIYXZlIHRoZSByZXN1bHRzIG9mIHRoZSBwcm9wb3NlZCBjaGFuZ2Vz IGJlZW4gdGVzdGVkPwotIFt4XSBJIHVzZSB0aGUgcGFja2FnZXMgYWZmZWN0ZWQgYnkgdGhlIHBy b3Bvc2VkIGNoYW5nZXMgb24gYSByZWd1bGFyIGJhc2lzIGFuZCBjb25maXJtIHRoaXMgUFIgd29y a3MgZm9yIG1lCi0gWyBdIEkgZ2VuZXJhbGx5IGRvbid0IHVzZSB0aGUgYWZmZWN0ZWQgcGFja2Fn ZXMgYnV0IGJyaWVmbHkgdGVzdGVkIHRoaXMgUFIKCjwhLS0KSWYgR2l0SHViIENJIGNhbm5vdCBi ZSB1c2VkIHRvIHZhbGlkYXRlIHRoZSBidWlsZCByZXN1bHQgKGZvciBleGFtcGxlLCBpZiB0aGUK YnVpbGQgaXMgbGlrZWx5IHRvIHRha2Ugc2V2ZXJhbCBob3VycyksIG1ha2Ugc3VyZSB0bwpbc2tp cCBDSV0oaHR0cHM6Ly9naXRodWIuY29tL3ZvaWQtbGludXgvdm9pZC1wYWNrYWdlcy9ibG9iL21h c3Rlci9DT05UUklCVVRJTkcubWQjY29udGludW91cy1pbnRlZ3JhdGlvbikuCldoZW4gc2tpcHBp bmcgQ0ksIHVuY29tbWVudCBhbmQgZmlsbCBvdXQgdGhlIGZvbGxvd2luZyBzZWN0aW9uLgpOb3Rl OiBmb3IgYnVpbGRzIHRoYXQgYXJlIGxpa2VseSB0byBjb21wbGV0ZSBpbiBsZXNzIHRoYW4gMiBo b3VycywgaXQgaXMgbm90CmFjY2VwdGFibGUgdG8gc2tpcCBDSS4KLS0+CjwhLS0KIyMjIyBEb2Vz IGl0IGJ1aWxkIGFuZCBydW4gc3VjY2Vzc2Z1bGx5PwooUGxlYXNlIGNob29zZSBhdCBsZWFzdCBv bmUgbmF0aXZlIGJ1aWxkIGFuZCwgaWYgc3VwcG9ydGVkLCBhdCBsZWFzdCBvbmUgY3Jvc3MgYnVp bGQuIE1vcmUgYXJlIGJldHRlci4pCi0gWyBdIEkgYnVpbHQgdGhpcyBQUiBsb2NhbGx5IGZvciBt eSBuYXRpdmUgYXJjaGl0ZWN0dXJlLCAoQVJDSC1MSUJDKQotIFsgXSBJIGJ1aWx0IHRoaXMgUFIg bG9jYWxseSBmb3IgdGhlc2UgYXJjaGl0ZWN0dXJlcyAoaWYgc3VwcG9ydGVkLiBtYXJrIGNyb3Nz YnVpbGRzKToKICAtIFsgXSBhYXJjaDY0LW11c2wKICAtIFsgXSBhcm12N2wKICAtIFsgXSBhcm12 NmwtbXVzbAotLT4KCkEgcGF0Y2ggZmlsZSBmcm9tIGh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxp bnV4L3ZvaWQtcGFja2FnZXMvcHVsbC8yOTk1Ni5wYXRjaCBpcyBhdHRhY2hlZA== --===============2025985701742322168== Content-Type: text/x-diff MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="github-pr-busybox-29956.patch" RnJvbSA1NzU1NzAxOTI2Y2VjYzcwYTIyOGVhNGUyMWRlNGNlYmZhYzBkNDRjIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiA9P1VURi04P3E/RGFuaWVsPTIwRXk9QzM9OUZlcj89IDxkYW5p ZWwuZXlzc2VyQGdtYWlsLmNvbT4KRGF0ZTogRnJpLCAyIEFwciAyMDIxIDIyOjU2OjE5ICswMjAw ClN1YmplY3Q6IFtQQVRDSF0gYnVzeWJveDogYWRkIHVwc3RyZWFtIHBhdGNoIGZvciBDVkUtMjAy MS0yODgzMQoKLS0tCiAuLi5zc19ndW56aXAtRml4LURvUy1pZi1nemlwLWlzLWNvcnJ1cHQucGF0 Y2ggfCA1NyArKysrKysrKysrKysrKysrKysrCiBzcmNwa2dzL2J1c3lib3gvdGVtcGxhdGUgICAg ICAgICAgICAgICAgICAgICAgfCAgNCArLQogMiBmaWxlcyBjaGFuZ2VkLCA1OSBpbnNlcnRpb25z KCspLCAyIGRlbGV0aW9ucygtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IHNyY3BrZ3MvYnVzeWJveC9w YXRjaGVzL2RlY29tcHJlc3NfZ3VuemlwLUZpeC1Eb1MtaWYtZ3ppcC1pcy1jb3JydXB0LnBhdGNo CgpkaWZmIC0tZ2l0IGEvc3JjcGtncy9idXN5Ym94L3BhdGNoZXMvZGVjb21wcmVzc19ndW56aXAt Rml4LURvUy1pZi1nemlwLWlzLWNvcnJ1cHQucGF0Y2ggYi9zcmNwa2dzL2J1c3lib3gvcGF0Y2hl cy9kZWNvbXByZXNzX2d1bnppcC1GaXgtRG9TLWlmLWd6aXAtaXMtY29ycnVwdC5wYXRjaApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAuLmZlOTczNTA2NzM3ZAotLS0gL2Rl di9udWxsCisrKyBiL3NyY3BrZ3MvYnVzeWJveC9wYXRjaGVzL2RlY29tcHJlc3NfZ3VuemlwLUZp eC1Eb1MtaWYtZ3ppcC1pcy1jb3JydXB0LnBhdGNoCkBAIC0wLDAgKzEsNTcgQEAKK0Zyb20gZGJk M2I4ODNhODkxZjA3NjkxMWQ3NTJmNTZmN2E5MDZkNTY1MGExNyBNb24gU2VwIDE3IDAwOjAwOjAw IDIwMDEKK0Zyb206IFNhbXVlbCBTYXBhbHNraSA8c2FtdWVsLnNhcGFsc2tpQG5va2lhLmNvbT4K K0RhdGU6IFdlZCwgMyBNYXIgMjAyMSAxNjozMToyMiArMDEwMAorU3ViamVjdDogW1BBVENIXSBk ZWNvbXByZXNzX2d1bnppcDogRml4IERvUyBpZiBnemlwIGlzIGNvcnJ1cHQKKworT24gY2VydGFp biBjb3JydXB0IGd6aXAgZmlsZXMsIGh1ZnRfYnVpbGQgd2lsbCBzZXQgdGhlIGVycm9yIGJpdCBv bgordGhlIHJlc3VsdCBwb2ludGVyLiBJZiBhZnRlcndhcmRzIGFib3J0X3VuemlwIGlzIGNhbGxl ZCBodWZ0X2ZyZWUKK21pZ2h0IHJ1biBpbnRvIGEgc2VnbWVudGF0aW9uIGZhdWx0IG9yIGFuIGlu dmFsaWQgcG9pbnRlciB0bworZnJlZShwKS4KKworSW4gb3JkZXIgdG8gbWl0aWdhdGUgdGhpcywg d2UgY2hlY2sgaW4gaHVmdF9mcmVlIGlmIHRoZSBlcnJvciBiaXQKK2lzIHNldCBhbmQgY2xlYXIg aXQgYmVmb3JlIHRoZSBsaW5rZWQgbGlzdCBpcyBmcmVlZC4KKworU2lnbmVkLW9mZi1ieTogU2Ft dWVsIFNhcGFsc2tpIDxzYW11ZWwuc2FwYWxza2lAbm9raWEuY29tPgorU2lnbmVkLW9mZi1ieTog UGV0ZXIgS2Flc3RsZSA8cGV0ZXIua2Flc3RsZUBub2tpYS5jb20+CitTaWduZWQtb2ZmLWJ5OiBE ZW55cyBWbGFzZW5rbyA8dmRhLmxpbnV4QGdvb2dsZW1haWwuY29tPgorLS0tCisgYXJjaGl2YWwv bGliYXJjaGl2ZS9kZWNvbXByZXNzX2d1bnppcC5jIHwgMTIgKysrKysrKysrKy0tCisgMSBmaWxl IGNoYW5nZWQsIDEwIGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCisKK2RpZmYgLS1naXQg YXJjaGl2YWwvbGliYXJjaGl2ZS9kZWNvbXByZXNzX2d1bnppcC5jIGFyY2hpdmFsL2xpYmFyY2hp dmUvZGVjb21wcmVzc19ndW56aXAuYworaW5kZXggMDMwNDljYzliLi5lMDUyMDE5MGEgMTAwNjQ0 CistLS0gYXJjaGl2YWwvbGliYXJjaGl2ZS9kZWNvbXByZXNzX2d1bnppcC5jCisrKysgYXJjaGl2 YWwvbGliYXJjaGl2ZS9kZWNvbXByZXNzX2d1bnppcC5jCitAQCAtMjIwLDEwICsyMjAsMjAgQEAg c3RhdGljIGNvbnN0IHVpbnQ4X3QgYm9yZGVyW10gQUxJR04xID0geworICAqIGVhY2ggdGFibGUu CisgICogdDogdGFibGUgdG8gZnJlZQorICAqLworKyNkZWZpbmUgQkFEX0hVRlQocCkgKCh1aW50 cHRyX3QpKHApICYgMSkKKysjZGVmaW5lIEVSUl9SRVQgICAgICgoaHVmdF90KikodWludHB0cl90 KTEpCisgc3RhdGljIHZvaWQgaHVmdF9mcmVlKGh1ZnRfdCAqcCkKKyB7CisgCWh1ZnRfdCAqcTsK KyAKKysJLyoKKysJICogSWYgJ3AnIGhhcyB0aGUgZXJyb3IgYml0IHNldCB3ZSBoYXZlIHRvIGNs ZWFyIGl0LCBvdGhlcndpc2Ugd2UgbWlnaHQgcnVuCisrCSAqIGludG8gYSBzZWdtZW50YXRpb24g ZmF1bHQgb3IgYW4gaW52YWxpZCBwb2ludGVyIHRvIGZyZWUocCkKKysJICovCisrCWlmIChCQURf SFVGVChwKSkgeworKwkJcCA9IChodWZ0X3QqKSgodWludHB0cl90KShwKSBeICh1aW50cHRyX3Qp KEVSUl9SRVQpKTsKKysJfQorKworIAkvKiBHbyB0aHJvdWdoIGxpbmtlZCBsaXN0LCBmcmVlaW5n IGZyb20gdGhlIG1hbGxvY2VkICh0Wy0xXSkgYWRkcmVzcy4gKi8KKyAJd2hpbGUgKHApIHsKKyAJ CXEgPSAoLS1wKS0+di50OworQEAgLTI4OSw4ICsyOTksNiBAQCBzdGF0aWMgdW5zaWduZWQgZmls bF9iaXRidWZmZXIoU1RBVEVfUEFSQU0gdW5zaWduZWQgYml0YnVmZmVyLCB1bnNpZ25lZCAqY3Vy cmVudAorICAqIG9yIGEgdmFsaWQgcG9pbnRlciB0byBhIEh1ZmZtYW4gdGFibGUsIE9SZWQgd2l0 aCAweDEgaWYgaW5jb21wZXRlIHRhYmxlCisgICogaXMgZ2l2ZW46ICJmaXhlZCBpbmZsYXRlIiBk ZWNvZGVyIGZlZWRzIHVzIHN1Y2ggZGF0YS4KKyAgKi8KKy0jZGVmaW5lIEJBRF9IVUZUKHApICgo dWludHB0cl90KShwKSAmIDEpCistI2RlZmluZSBFUlJfUkVUICAgICAoKGh1ZnRfdCopKHVpbnRw dHJfdCkxKQorIHN0YXRpYyBodWZ0X3QqIGh1ZnRfYnVpbGQoY29uc3QgdW5zaWduZWQgKmIsIGNv bnN0IHVuc2lnbmVkIG4sCisgCQkJY29uc3QgdW5zaWduZWQgcywgY29uc3Qgc3RydWN0IGNwX2V4 dCAqY3BfZXh0LAorIAkJCXVuc2lnbmVkICptKQorLS0gCisyLjMxLjEKKwpkaWZmIC0tZ2l0IGEv c3JjcGtncy9idXN5Ym94L3RlbXBsYXRlIGIvc3JjcGtncy9idXN5Ym94L3RlbXBsYXRlCmluZGV4 IGRlOGE2MDZmMDJkZi4uMWQyNGU3ZWExMTA4IDEwMDY0NAotLS0gYS9zcmNwa2dzL2J1c3lib3gv dGVtcGxhdGUKKysrIGIvc3JjcGtncy9idXN5Ym94L3RlbXBsYXRlCkBAIC0xLDEzICsxLDEzIEBA CiAjIFRlbXBsYXRlIGZpbGUgZm9yICdidXN5Ym94JwogcGtnbmFtZT1idXN5Ym94CiB2ZXJzaW9u PTEuMzIuMQotcmV2aXNpb249MQorcmV2aXNpb249MgogaG9zdG1ha2VkZXBlbmRzPSJwZXJsIgog Y2hlY2tkZXBlbmRzPSJ0YXIgd2hpY2ggemlwIgogc2hvcnRfZGVzYz0iU3dpc3MgQXJteSBLbmlm ZSBvZiBFbWJlZGRlZCBMaW51eCIKIG1haW50YWluZXI9IkNhbWVyb24gTmVtbyA8Y25lbW9AdHV0 YW5vdGEuY29tPiIKIGxpY2Vuc2U9IkdQTC0yLjAtb25seSIKLWhvbWVwYWdlPSJodHRwOi8vd3d3 LmJ1c3lib3gubmV0IgoraG9tZXBhZ2U9Imh0dHBzOi8vd3d3LmJ1c3lib3gubmV0IgogZGlzdGZp bGVzPSIke2hvbWVwYWdlfS9kb3dubG9hZHMvYnVzeWJveC0ke3ZlcnNpb259LnRhci5iejIiCiBj aGVja3N1bT05ZDU3YzRiZDMzOTc0MTQwZmQ0MTExMjYwNDY4YWYyMjg1NmYxMmY1YjVlZjdjNzBj OGQ5Yjc1YzcxMmEwZGVlCiAK --===============2025985701742322168==--