From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 22411 invoked from network); 16 Aug 2022 18:58:26 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 16 Aug 2022 18:58:26 -0000 Content-Type: multipart/mixed; boundary="===============3882894146947805892==" MIME-Version: 1.0 Subject: =?utf8?q?=5BPR_PATCH=5D_busybox=3A_applied_CVE-2022-28391_fix_patches?= To: ml@inbox.vuxu.org From: Sigmw Reply-to: ml@inbox.vuxu.org Message-ID: Date: Tue, 16 Aug 2022 20:58:25 +0200 List-Id: GitHub notification mails are now in MIME to allow UTF8. --===============3882894146947805892== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlcmUgaXMgYSBuZXcgcHVsbCByZXF1ZXN0IGJ5IFNpZ213IGFnYWluc3QgbWFzdGVyIG9uIHRo ZSB2b2lkLXBhY2thZ2VzIHJlcG9zaXRvcnkKCmh0dHBzOi8vZ2l0aHViLmNvbS9TaWdtdy92b2lk LXBhY2thZ2VzIGJ1c3lib3gKaHR0cHM6Ly9naXRodWIuY29tL3ZvaWQtbGludXgvdm9pZC1wYWNr YWdlcy9wdWxsLzM4NzIyCgpidXN5Ym94OiBhcHBsaWVkIENWRS0yMDIyLTI4MzkxIGZpeCBwYXRj aGVzCjwhLS0gVW5jb21tZW50IHJlbGV2YW50IHNlY3Rpb25zIGFuZCBkZWxldGUgb3B0aW9ucyB3 aGljaCBhcmUgbm90IGFwcGxpY2FibGUgLS0+DQoNCiMjIyMgVGVzdGluZyB0aGUgY2hhbmdlcw0K LSBJIHRlc3RlZCB0aGUgY2hhbmdlcyBpbiB0aGlzIFBSOiAqKllFUyoqDQotIFRoaXMgdHdvIHBh dGNoZXMgYXJlIG5vdCB1cHN0cmVhbSwgbWFkZSBieSBBbHBpbmUgTGludXggVGVhbSwgYnV0IHRo ZXkgYXJlIHJlcG9ydGVkIGluIGh0dHBzOi8vYnVncy5idXN5Ym94Lm5ldC9zaG93X2J1Zy5jZ2k/ aWQ9MTQ4MTENCi0gU291cmNlOiBodHRwczovL2dpdC5hbHBpbmVsaW51eC5vcmcvYXBvcnRzL3Bs YWluL21haW4vYnVzeWJveC8wMDAyLW5zbG9va3VwLXNhbml0aXplLWFsbC1wcmludGVkLXN0cmlu Z3Mtd2l0aC1wcmludGFibGUucGF0Y2gNCi0gU291cmNlOiAgaHR0cHM6Ly9naXQuYWxwaW5lbGlu dXgub3JnL2Fwb3J0cy9wbGFpbi9tYWluL2J1c3lib3gvMDAwMS1saWJiYi1zb2NrYWRkcjJzdHIt ZW5zdXJlLW9ubHktcHJpbnRhYmxlLWNoYXJhY3RlcnMtLnBhdGNoDQotIENoZWNrIENWRTogaHR0 cHM6Ly9jdmUubWl0cmUub3JnL2NnaS1iaW4vY3ZlbmFtZS5jZ2k/bmFtZT1DVkUtMjAyMi0yODM5 MQ0KPCEtLQ0KIyMjIyBOZXcgcGFja2FnZQ0KLSBUaGlzIG5ldyBwYWNrYWdlIGNvbmZvcm1zIHRv IHRoZSBbcGFja2FnZSByZXF1aXJlbWVudHNdKGh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4 L3ZvaWQtcGFja2FnZXMvYmxvYi9tYXN0ZXIvQ09OVFJJQlVUSU5HLm1kI3BhY2thZ2UtcmVxdWly ZW1lbnRzKTogKipZRVMqKnwqKk5PKioNCi0tPg0KDQo8IS0tIE5vdGU6IElmIHRoZSBidWlsZCBp cyBsaWtlbHkgdG8gdGFrZSBtb3JlIHRoYW4gMiBob3VycywgcGxlYXNlIGFkZCBjaSBza2lwIHRh ZyBhcyBkZXNjcmliZWQgaW4NCmh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQtcGFj a2FnZXMvYmxvYi9tYXN0ZXIvQ09OVFJJQlVUSU5HLm1kI2NvbnRpbnVvdXMtaW50ZWdyYXRpb24N CmFuZCB0ZXN0IGF0IGxlYXN0IG9uZSBuYXRpdmUgYnVpbGQgYW5kLCBpZiBzdXBwb3J0ZWQsIGF0 IGxlYXN0IG9uZSBjcm9zcyBidWlsZC4NCklnbm9yZSB0aGlzIHNlY3Rpb24gaWYgdGhpcyBQUiBp cyBub3Qgc2tpcHBpbmcgQ0kuDQotLT4NCjwhLS0NCiMjIyMgTG9jYWwgYnVpbGQgdGVzdGluZw0K LSBJIGJ1aWx0IHRoaXMgUFIgbG9jYWxseSBmb3IgbXkgbmF0aXZlIGFyY2hpdGVjdHVyZSwgKEFS Q0gtTElCQykNCi0gSSBidWlsdCB0aGlzIFBSIGxvY2FsbHkgZm9yIHRoZXNlIGFyY2hpdGVjdHVy ZXMgKGlmIHN1cHBvcnRlZC4gbWFyayBjcm9zc2J1aWxkcyk6DQogIC0gYWFyY2g2NC1tdXNsDQog IC0gYXJtdjdsDQogIC0gYXJtdjZsLW11c2wNCi0tPg0KCgpBIHBhdGNoIGZpbGUgZnJvbSBodHRw czovL2dpdGh1Yi5jb20vdm9pZC1saW51eC92b2lkLXBhY2thZ2VzL3B1bGwvMzg3MjIucGF0Y2gg aXMgYXR0YWNoZWQ= --===============3882894146947805892== Content-Type: text/x-diff MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="github-pr-busybox-38722.patch" RnJvbSBjMzA5MWMzZmIxMGUxYTZlYzQzYTFiN2UzM2M5ZGE5ZTk1NDAwMTk0IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBMdWNhcyBSb2JlcnRvIDxzaWdtd0Bwcm90b25tYWlsLmNvbT4K RGF0ZTogVHVlLCAxNiBBdWcgMjAyMiAxNTo1NToyMSAtMDMwMApTdWJqZWN0OiBbUEFUQ0hdIGJ1 c3lib3g6IGFwcGxpZWQgQ1ZFLTIwMjItMjgzOTEgZml4IHBhdGNoZXMKCi0tLQogLi4udHItZW5z dXJlLW9ubHktcHJpbnRhYmxlLWNoYXJhY3RlcnMtLnBhdGNoIHwgNDAgKysrKysrKysrKysKIC4u LmUtYWxsLXByaW50ZWQtc3RyaW5ncy13aXRoLXByaW50YWJsZS5wYXRjaCB8IDY3ICsrKysrKysr KysrKysrKysrKysKIDIgZmlsZXMgY2hhbmdlZCwgMTA3IGluc2VydGlvbnMoKykKIGNyZWF0ZSBt b2RlIDEwMDY0NCBzcmNwa2dzL2J1c3lib3gvcGF0Y2hlcy8wMDAxLWxpYmJiLXNvY2thZGRyMnN0 ci1lbnN1cmUtb25seS1wcmludGFibGUtY2hhcmFjdGVycy0ucGF0Y2gKIGNyZWF0ZSBtb2RlIDEw MDY0NCBzcmNwa2dzL2J1c3lib3gvcGF0Y2hlcy8wMDAyLW5zbG9va3VwLXNhbml0aXplLWFsbC1w cmludGVkLXN0cmluZ3Mtd2l0aC1wcmludGFibGUucGF0Y2gKCmRpZmYgLS1naXQgYS9zcmNwa2dz L2J1c3lib3gvcGF0Y2hlcy8wMDAxLWxpYmJiLXNvY2thZGRyMnN0ci1lbnN1cmUtb25seS1wcmlu dGFibGUtY2hhcmFjdGVycy0ucGF0Y2ggYi9zcmNwa2dzL2J1c3lib3gvcGF0Y2hlcy8wMDAxLWxp YmJiLXNvY2thZGRyMnN0ci1lbnN1cmUtb25seS1wcmludGFibGUtY2hhcmFjdGVycy0ucGF0Y2gK bmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwLi4xZDE3MTZlM2IwYzEKLS0t IC9kZXYvbnVsbAorKysgYi9zcmNwa2dzL2J1c3lib3gvcGF0Y2hlcy8wMDAxLWxpYmJiLXNvY2th ZGRyMnN0ci1lbnN1cmUtb25seS1wcmludGFibGUtY2hhcmFjdGVycy0ucGF0Y2gKQEAgLTAsMCAr MSw0MCBAQAorRnJvbSAwYzhkYTFiZWFkOGZmYWYyNzBiNGI3MjNlYWQyYzUxNzM3MTQwNWQ3IE1v biBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogQXJpYWRuZSBDb25pbGwgPGFyaWFkbmVAZGVy ZWZlcmVuY2VkLm9yZz4KK0RhdGU6IFN1biwgMyBBcHIgMjAyMiAxMjoxNDozMyArMDAwMAorU3Vi amVjdDogW1BBVENIIDEvMl0gbGliYmI6IHNvY2thZGRyMnN0cjogZW5zdXJlIG9ubHkgcHJpbnRh YmxlIGNoYXJhY3RlcnMgYXJlCisgcmV0dXJuZWQgZm9yIHRoZSBob3N0bmFtZSBwYXJ0CisKK0NW RTogUGVuZGluZworVXBzdHJlYW0tU3RhdHVzOiBQZW5kaW5nCitTaWduZWQtb2ZmLWJ5OiBBcmlh ZG5lIENvbmlsbCA8YXJpYWRuZUBkZXJlZmVyZW5jZWQub3JnPgorLS0tCisgbGliYmIveGNvbm5l Y3QuYyB8IDUgKysrLS0KKyAxIGZpbGUgY2hhbmdlZCwgMyBpbnNlcnRpb25zKCspLCAyIGRlbGV0 aW9ucygtKQorCitkaWZmIC0tZ2l0IGEvbGliYmIveGNvbm5lY3QuYyBiL2xpYmJiL3hjb25uZWN0 LmMKK2luZGV4IDBlMGIyNDdiOC4uMDJjMDYxZTY3IDEwMDY0NAorLS0tIGEvbGliYmIveGNvbm5l Y3QuYworKysrIGIvbGliYmIveGNvbm5lY3QuYworQEAgLTQ5Nyw4ICs0OTcsOSBAQCBzdGF0aWMg Y2hhciogRkFTVF9GVU5DIHNvY2thZGRyMnN0cihjb25zdCBzdHJ1Y3Qgc29ja2FkZHIgKnNhLCBp bnQgZmxhZ3MpCisgCSk7CisgCWlmIChyYykKKyAJCXJldHVybiBOVUxMOworKwkvKiBlbnN1cmUg aG9zdCBjb250YWlucyBvbmx5IHByaW50YWJsZSBjaGFyYWN0ZXJzICovCisgCWlmIChmbGFncyAm IElHTk9SRV9QT1JUKQorLQkJcmV0dXJuIHhzdHJkdXAoaG9zdCk7CisrCQlyZXR1cm4geHN0cmR1 cChwcmludGFibGVfc3RyaW5nKGhvc3QpKTsKKyAjaWYgRU5BQkxFX0ZFQVRVUkVfSVBWNgorIAlp ZiAoc2EtPnNhX2ZhbWlseSA9PSBBRl9JTkVUNikgeworIAkJaWYgKHN0cmNocihob3N0LCAnOicp KSAvKiBoZWgsIGl0J3Mgbm90IGEgcmVzb2x2ZWQgaG9zdG5hbWUgKi8KK0BAIC01MDksNyArNTEw LDcgQEAgc3RhdGljIGNoYXIqIEZBU1RfRlVOQyBzb2NrYWRkcjJzdHIoY29uc3Qgc3RydWN0IHNv Y2thZGRyICpzYSwgaW50IGZsYWdzKQorICNlbmRpZgorIAkvKiBGb3Igbm93IHdlIGRvbid0IHN1 cHBvcnQgYW55dGhpbmcgZWxzZSwgc28gaXQgaGFzIHRvIGJlIElORVQgKi8KKyAJLyppZiAoc2Et PnNhX2ZhbWlseSA9PSBBRl9JTkVUKSovCistCQlyZXR1cm4geGFzcHJpbnRmKCIlczolcyIsIGhv c3QsIHNlcnYpOworKwkJcmV0dXJuIHhhc3ByaW50ZigiJXM6JXMiLCBwcmludGFibGVfc3RyaW5n KGhvc3QpLCBzZXJ2KTsKKyAJLypyZXR1cm4geHN0cmR1cChob3N0KTsqLworIH0KKyAKKy0tIAor Mi4zNS4xCisKZGlmZiAtLWdpdCBhL3NyY3BrZ3MvYnVzeWJveC9wYXRjaGVzLzAwMDItbnNsb29r dXAtc2FuaXRpemUtYWxsLXByaW50ZWQtc3RyaW5ncy13aXRoLXByaW50YWJsZS5wYXRjaCBiL3Ny Y3BrZ3MvYnVzeWJveC9wYXRjaGVzLzAwMDItbnNsb29rdXAtc2FuaXRpemUtYWxsLXByaW50ZWQt c3RyaW5ncy13aXRoLXByaW50YWJsZS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAw MDAwMDAwMDAwMDAuLjQ3NTg1MDk2NGEwZgotLS0gL2Rldi9udWxsCisrKyBiL3NyY3BrZ3MvYnVz eWJveC9wYXRjaGVzLzAwMDItbnNsb29rdXAtc2FuaXRpemUtYWxsLXByaW50ZWQtc3RyaW5ncy13 aXRoLXByaW50YWJsZS5wYXRjaApAQCAtMCwwICsxLDY3IEBACitGcm9tIDgxMmI0MDdlNTQ1Yjcw YjE2Y2YzMmFhZGUxMzViNWMzMmVhZjY3NGYgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9t OiBBcmlhZG5lIENvbmlsbCA8YXJpYWRuZUBkZXJlZmVyZW5jZWQub3JnPgorRGF0ZTogU3VuLCAz IEFwciAyMDIyIDEyOjE2OjQ1ICswMDAwCitTdWJqZWN0OiBbUEFUQ0ggMi8yXSBuc2xvb2t1cDog c2FuaXRpemUgYWxsIHByaW50ZWQgc3RyaW5ncyB3aXRoCisgcHJpbnRhYmxlX3N0cmluZworCitP dGhlcndpc2UsIHRlcm1pbmFsIHNlcXVlbmNlcyBjYW4gYmUgaW5qZWN0ZWQsIHdoaWNoIGVuYWJs ZXMgdmFyaW91cyB0ZXJtaW5hbCBpbmplY3Rpb24KK2F0dGFja3MgZnJvbSBETlMgcmVzdWx0cy4K KworQ1ZFOiBQZW5kaW5nCitVcHN0cmVhbS1TdGF0dXM6IFBlbmRpbmcKK1NpZ25lZC1vZmYtYnk6 IEFyaWFkbmUgQ29uaWxsIDxhcmlhZG5lQGRlcmVmZXJlbmNlZC5vcmc+CistLS0KKyBuZXR3b3Jr aW5nL25zbG9va3VwLmMgfCAxMCArKysrKy0tLS0tCisgMSBmaWxlIGNoYW5nZWQsIDUgaW5zZXJ0 aW9ucygrKSwgNSBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBhL25ldHdvcmtpbmcvbnNsb29r dXAuYyBiL25ldHdvcmtpbmcvbnNsb29rdXAuYworaW5kZXggNmRhOTdiYWY0Li40YmRjZGUxYjgg MTAwNjQ0CistLS0gYS9uZXR3b3JraW5nL25zbG9va3VwLmMKKysrKyBiL25ldHdvcmtpbmcvbnNs b29rdXAuYworQEAgLTQwNyw3ICs0MDcsNyBAQCBzdGF0aWMgTk9JTkxJTkUgaW50IHBhcnNlX3Jl cGx5KGNvbnN0IHVuc2lnbmVkIGNoYXIgKm1zZywgc2l6ZV90IGxlbikKKyAJCQkJLy9wcmludGYo IlVuYWJsZSB0byB1bmNvbXByZXNzIGRvbWFpbjogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7Cisg CQkJCXJldHVybiAtMTsKKyAJCQl9CistCQkJcHJpbnRmKGZvcm1hdCwgbnNfcnJfbmFtZShyciks IGRuYW1lKTsKKysJCQlwcmludGYoZm9ybWF0LCBuc19ycl9uYW1lKHJyKSwgcHJpbnRhYmxlX3N0 cmluZyhkbmFtZSkpOworIAkJCWJyZWFrOworIAorIAkJY2FzZSBuc190X214OgorQEAgLTQyMiw3 ICs0MjIsNyBAQCBzdGF0aWMgTk9JTkxJTkUgaW50IHBhcnNlX3JlcGx5KGNvbnN0IHVuc2lnbmVk IGNoYXIgKm1zZywgc2l6ZV90IGxlbikKKyAJCQkJLy9wcmludGYoIkNhbm5vdCB1bmNvbXByZXNz IE1YIGRvbWFpbjogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7CisgCQkJCXJldHVybiAtMTsKKyAJ CQl9CistCQkJcHJpbnRmKCIlc1x0bWFpbCBleGNoYW5nZXIgPSAlZCAlc1xuIiwgbnNfcnJfbmFt ZShyciksIG4sIGRuYW1lKTsKKysJCQlwcmludGYoIiVzXHRtYWlsIGV4Y2hhbmdlciA9ICVkICVz XG4iLCBuc19ycl9uYW1lKHJyKSwgbiwgcHJpbnRhYmxlX3N0cmluZyhkbmFtZSkpOworIAkJCWJy ZWFrOworIAorIAkJY2FzZSBuc190X3R4dDoKK0BAIC00MzQsNyArNDM0LDcgQEAgc3RhdGljIE5P SU5MSU5FIGludCBwYXJzZV9yZXBseShjb25zdCB1bnNpZ25lZCBjaGFyICptc2csIHNpemVfdCBs ZW4pCisgCQkJaWYgKG4gPiAwKSB7CisgCQkJCW1lbXNldChkbmFtZSwgMCwgc2l6ZW9mKGRuYW1l KSk7CisgCQkJCW1lbWNweShkbmFtZSwgbnNfcnJfcmRhdGEocnIpICsgMSwgbik7CistCQkJCXBy aW50ZigiJXNcdHRleHQgPSBcIiVzXCJcbiIsIG5zX3JyX25hbWUocnIpLCBkbmFtZSk7CisrCQkJ CXByaW50ZigiJXNcdHRleHQgPSBcIiVzXCJcbiIsIG5zX3JyX25hbWUocnIpLCBwcmludGFibGVf c3RyaW5nKGRuYW1lKSk7CisgCQkJfQorIAkJCWJyZWFrOworIAorQEAgLTQ1NCw3ICs0NTQsNyBA QCBzdGF0aWMgTk9JTkxJTkUgaW50IHBhcnNlX3JlcGx5KGNvbnN0IHVuc2lnbmVkIGNoYXIgKm1z Zywgc2l6ZV90IGxlbikKKyAJCQl9CisgCisgCQkJcHJpbnRmKCIlc1x0c2VydmljZSA9ICV1ICV1 ICV1ICVzXG4iLCBuc19ycl9uYW1lKHJyKSwKKy0JCQkJbnNfZ2V0MTYoY3ApLCBuc19nZXQxNihj cCArIDIpLCBuc19nZXQxNihjcCArIDQpLCBkbmFtZSk7CisrCQkJCW5zX2dldDE2KGNwKSwgbnNf Z2V0MTYoY3AgKyAyKSwgbnNfZ2V0MTYoY3AgKyA0KSwgcHJpbnRhYmxlX3N0cmluZyhkbmFtZSkp OworIAkJCWJyZWFrOworIAorIAkJY2FzZSBuc190X3NvYToKK0BAIC00ODMsNyArNDgzLDcgQEAg c3RhdGljIE5PSU5MSU5FIGludCBwYXJzZV9yZXBseShjb25zdCB1bnNpZ25lZCBjaGFyICptc2cs IHNpemVfdCBsZW4pCisgCQkJCXJldHVybiAtMTsKKyAJCQl9CisgCistCQkJcHJpbnRmKCJcdG1h aWwgYWRkciA9ICVzXG4iLCBkbmFtZSk7CisrCQkJcHJpbnRmKCJcdG1haWwgYWRkciA9ICVzXG4i LCBwcmludGFibGVfc3RyaW5nKGRuYW1lKSk7CisgCQkJY3AgKz0gbjsKKyAKKyAJCQlwcmludGYo Ilx0c2VyaWFsID0gJWx1XG4iLCBuc19nZXQzMihjcCkpOworLS0gCisyLjM1LjEK --===============3882894146947805892==--