mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-08 08:30:47 -09:00
7613501954
Fixes the following vulnerability:
- CVE-2025-34450:
merbanan/rtl_433 versions up to and including 25.02 and prior to
commit 25e47f8 contain a stack-based buffer overflow vulnerability in
the function parse_rfraw() located in src/rfraw.c. When processing
crafted or excessively large raw RF input data, the application may
write beyond the bounds of a stack buffer, resulting in memory
corruption or a crash. This vulnerability can be exploited to cause a
denial of service and, under certain conditions, may be leveraged for
further exploitation depending on the execution environment and
available mitigations.
For mroe information, see:
- https://www.cve.org/CVERecord?id=CVE-2025-34450
- 25e47f8932
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
48 lines
1.2 KiB
Makefile
48 lines
1.2 KiB
Makefile
################################################################################
|
|
#
|
|
# rtl_433
|
|
#
|
|
################################################################################
|
|
|
|
RTL_433_VERSION = 25.02
|
|
RTL_433_SITE = $(call github,merbanan,rtl_433,$(RTL_433_VERSION))
|
|
RTL_433_LICENSE = GPL-2.0+
|
|
RTL_433_LICENSE_FILES = COPYING
|
|
RTL_433_CPE_ID_VALID = YES
|
|
|
|
# 0002-Fix-overflow-in-rfraw-test-data-parsing.patch
|
|
RTL_433_IGNORE_CVES += CVE-2025-34450
|
|
|
|
# Force Release build to remove ASAN.
|
|
RTL_433_CONF_OPTS = \
|
|
-DCMAKE_BUILD_TYPE=Release \
|
|
-DBUILD_DOCUMENTATION=OFF \
|
|
-DBUILD_TESTING=OFF \
|
|
-DBUILD_TESTING_ANALYZER=OFF \
|
|
-DENABLE_SOAPYSDR=OFF
|
|
|
|
# do not include Buildroot git info in version output
|
|
RTL_433_CONF_ENV = GIT_DIR=.
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBRTLSDR),y)
|
|
RTL_433_DEPENDENCIES += librtlsdr
|
|
RTL_433_CONF_OPTS += -DENABLE_RTLSDR=ON
|
|
else
|
|
RTL_433_CONF_OPTS += -DENABLE_RTLSDR=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
RTL_433_DEPENDENCIES += openssl
|
|
RTL_433_CONF_OPTS += -DENABLE_OPENSSL=ON
|
|
else
|
|
RTL_433_CONF_OPTS += -DENABLE_OPENSSL=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_THREADS),y)
|
|
RTL_433_CONF_OPTS += -DENABLE_THREADS=ON
|
|
else
|
|
RTL_433_CONF_OPTS += -DENABLE_THREADS=OFF
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|