aboutsummaryrefslogtreecommitdiffstats
path: root/package/utils/busybox/patches/001-CVE-2022-30065-awk-fix-use-after-free.patch
Commit message (Collapse)AuthorAgeFilesLines
* busybox: awk: fix use after free (CVE-2022-30065)Hauke Mehrtens2022-11-051-0/+42
This backports a commit which fixes a use after free bug in awk. CVE-2022-30065 description: A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 8b383ee2a0d21144258346ad39006fc499d04b4f)