pcre: Added fix for CVE-2017-11164 by adding stack recursion limit
authorThomas Heil <heil@terminal-consulting.de>
Sun, 3 Sep 2017 13:03:56 +0000 (15:03 +0200)
committerThomas Heil <heil@terminal-consulting.de>
Sun, 3 Sep 2017 13:03:56 +0000 (15:03 +0200)
Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
libs/pcre/Makefile

index 952deb6a502203300653064f571aa66c2ef0d5eb..ba4d571ce3765d8cc01cc67c8888d1d28d4471c4 100644 (file)
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=pcre
 PKG_VERSION:=8.41
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
 PKG_SOURCE_URL:=ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/
@@ -53,6 +53,7 @@ CONFIGURE_ARGS += \
        --enable-utf8 \
        --enable-unicode-properties \
        --enable-pcre16 \
+       --with-match-limit-recursion=16000 \
 
 ifneq ($(CONFIG_PACKAGE_libpcrecpp),)
   CONFIGURE_ARGS+= --enable-cpp