blob: 433c7a450adf93e9c01e705568e72d58c48db3f4 [file] [log] [blame]
Andrew Geissler220dafd2023-10-04 10:18:08 -05001From 14d72f6973270f78455a8628143f2cff90e8f41e Mon Sep 17 00:00:00 2001
2From: Trevor Gamblin <tgamblin@baylibre.com>
3Date: Tue, 29 Aug 2023 14:12:27 -0400
4Subject: [PATCH] selftest-hello: fix CVE-1234-56789
5
6This test should pass the mbox cve tag test.
7
8CVE: CVE-1234-56789
9
10Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
11---
12 .../selftest-hello/files/CVE-1234-56789.patch | 27 +++++++++++++++++++
13 .../selftest-hello/selftest-hello_1.0.bb | 6 +++--
14 2 files changed, 31 insertions(+), 2 deletions(-)
15 create mode 100644 meta-selftest/recipes-test/selftest-hello/files/CVE-1234-56789.patch
16
17diff --git a/meta-selftest/recipes-test/selftest-hello/files/CVE-1234-56789.patch b/meta-selftest/recipes-test/selftest-hello/files/CVE-1234-56789.patch
18new file mode 100644
19index 0000000000..869cfb6fe5
20--- /dev/null
21+++ b/meta-selftest/recipes-test/selftest-hello/files/CVE-1234-56789.patch
22@@ -0,0 +1,27 @@
23+From b26a31186e6ee2eb1f506d5f2f9394d327a0df2f Mon Sep 17 00:00:00 2001
24+From: Trevor Gamblin <tgamblin@baylibre.com>
25+Date: Tue, 29 Aug 2023 14:08:20 -0400
26+Subject: [PATCH] Fix CVE-NOT-REAL
27+
28+CVE: CVE-1234-56789
29+Upstream-Status: Backport(http://example.com/example)
30+
31+Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
32+---
33+ strlen.c | 1 +
34+ 1 file changed, 1 insertion(+)
35+
36+diff --git a/strlen.c b/strlen.c
37+index 1788f38..83d7918 100644
38+--- a/strlen.c
39++++ b/strlen.c
40+@@ -8,6 +8,7 @@ int main() {
41+
42+ printf("%d\n", str_len(string1));
43+ printf("%d\n", str_len(string2));
44++ printf("CVE FIXED!!!\n");
45+
46+ return 0;
47+ }
48+--
49+2.41.0
50diff --git a/meta-selftest/recipes-test/selftest-hello/selftest-hello_1.0.bb b/meta-selftest/recipes-test/selftest-hello/selftest-hello_1.0.bb
51index 547587bef4..76975a6729 100644
52--- a/meta-selftest/recipes-test/selftest-hello/selftest-hello_1.0.bb
53+++ b/meta-selftest/recipes-test/selftest-hello/selftest-hello_1.0.bb
54@@ -3,7 +3,9 @@ SECTION = "examples"
55 LICENSE = "MIT"
56 LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302"
57
58-SRC_URI = "file://helloworld.c"
59+SRC_URI = "file://helloworld.c \
60+ file://CVE-1234-56789.patch \
61+ "
62
63 S = "${WORKDIR}"
64
65@@ -16,4 +18,4 @@ do_install() {
66 install -m 0755 helloworld ${D}${bindir}
67 }
68
69-BBCLASSEXTEND = "native nativesdk"
70\ No newline at end of file
71+BBCLASSEXTEND = "native nativesdk"
72--
732.41.0
74