musl: Fix CVE-2019-14697
authorHauke Mehrtens <hauke@hauke-m.de>
Sun, 18 Aug 2019 21:24:43 +0000 (23:24 +0200)
committerHauke Mehrtens <hauke@hauke-m.de>
Sun, 18 Aug 2019 22:03:32 +0000 (00:03 +0200)
commit09d63fb0a67c7747fdae5cc099b291a3ab8eca72
tree186766be12d2bfeaccf74a68d323255f50252c79
parent564d81e944b85f16afbe0b52741ce99cf4f3c50c
musl: Fix CVE-2019-14697

musl libc through 1.1.23 has an x87 floating-point stack adjustment
imbalance, related to the math/i386/ directory. In some cases, use of
this library could introduce out-of-bounds writes that are not present
in an application's source code.

This problem only affects x86 and no other architectures.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit c262daf308e0f0bd93bb5c5ee6238773935079ee)
toolchain/musl/common.mk
toolchain/musl/patches/030-fix-x87-stack-imbalance-in-corner-cases-of-i386-math.patch [new file with mode: 0644]
toolchain/musl/patches/031-fix-build-regression-in-i386-asm-for-atan2-atan2f.patch [new file with mode: 0644]