sysbench address CVE 2019 19391 (#9341)

Co-authored-by: Nicolas Guibourge <nicolasg@microsoft.com>
This commit is contained in:
nicolas guibourge 2024-06-06 15:44:05 -07:00 коммит произвёл GitHub
Родитель de215c67c4
Коммит 598fb367b1
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: B5690EEEBB952194
2 изменённых файлов: 20 добавлений и 1 удалений

Просмотреть файл

@ -0,0 +1,15 @@
backport of original fix (c017b2bafc24f71620de7225c5fdcd4a71ff2593)
diff -ru sysbench-1.0.20-orig/third_party/luajit/luajit/src/lj_debug.c sysbench-1.0.20/third_party/luajit/luajit/src/lj_debug.c
--- sysbench-1.0.20-orig/third_party/luajit/luajit/src/lj_debug.c 2024-06-06 18:48:05.167574363 +0000
+++ sysbench-1.0.20/third_party/luajit/luajit/src/lj_debug.c 2024-06-06 20:09:52.372314544 +0000
@@ -429,7 +429,8 @@
GCfunc *fn;
if (*what == '>') {
TValue *func = L->top - 1;
- api_check(L, tvisfunc(func));
+ if (!tvisfunc(func))
+ return 0;
fn = funcV(func);
L->top--;
what++;

Просмотреть файл

@ -1,12 +1,13 @@
Summary: Scriptable database and system performance benchmark
Name: sysbench
Version: 1.0.20
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv2+
Group: Applications/System
URL: https://github.com/akopytov/sysbench/
Source0: https://github.com/akopytov/%{name}/archive/%{version}/%{name}-%{version}.tar.gz
Patch0: enable-python3.patch
Patch1: CVE-2019-19391.patch
BuildRequires: automake
BuildRequires: libaio-devel
BuildRequires: libtool
@ -59,6 +60,9 @@ rm -f %{buildroot}%{_docdir}/sysbench/manual.html
%{_datadir}/%{name}
%changelog
* Thu Jun 06 2024 Nicolas Guibourge <nicolasg@microsoft.com> - 1.0.20-3
- Address CVE-2019-19391.
* Wed Jul 27 2022 Sean Dougherty <sdougherty@microsoft.com> - 1.0.20-2
- Added patch 'enable-python3' to fix issue with running tests on Python3.