opkg: fix use-after-free with duplicate packages on the command line
authorJo-Philipp Wich <jo@mein.io>
Sat, 23 Apr 2016 12:03:50 +0000 (14:03 +0200)
committerJo-Philipp Wich <jo@mein.io>
Sat, 23 Apr 2016 12:03:50 +0000 (14:03 +0200)
commit4c60a6f803759105d59b3e1fc52a9e37eecd08cd
tree95778cf7807a5364acac8d5bc205c4f205713c30
parentb9466382b54892c186dea356e701b5ecec86d8aa
opkg: fix use-after-free with duplicate packages on the command line

When the same package file is specified multiple times on the opkg install
command line, the name pointer on the argv array becomes stale after the
package structures have been merged, leading to invalid memory accesses
upon install.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
package/system/opkg/Makefile
package/system/opkg/patches/270-fix-use-after-free.patch [new file with mode: 0644]