Files
third_party_libxml2/install.py
fangyunzhong 43914121cd 修复CVE-2023-45322漏洞
Signed-off-by: fangyunzhong <fangyunzhong2@huawei.com>
2023-10-19 08:11:27 +00:00

82 lines
2.7 KiB
Python
Executable File

#!/usr/bin/env python
# -*- coding: utf-8 -*-
# Copyright (c) 2023 Huawei Device Co., Ltd.
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
import argparse
import os
import subprocess
import sys
def untar_file(tar_file_path, extract_path, args):
try:
if os.path.exists(extract_path):
rm_cmd = ['rm', '-rf', extract_path]
subprocess.run(rm_cmd, check=True)
tar_cmd = ['tar', '-xvf', tar_file_path, '-C', args.gen_dir]
subprocess.run(tar_cmd, check=True)
except Exception as e:
print("tar error!")
return
def apply_patch(patch_file, target_dir):
try:
if not os.path.exists(target_dir):
return
patch_cmd = ['patch', '-p1', "--fuzz=0", "--no-backup-if-mismatch", '-i', patch_file, '-d', target_dir]
subprocess.run(patch_cmd, check=True)
except Exception as e:
print("apply_patch error!")
return
def do_patch(args, target_dir):
patch_file = [
"Fix-memleaks-in-xmlXIncludeProcessFlags.patch",
"backport-parser-Fix-potential-memory-leak-in-xmlParseAttValue.patch",
"Fix-memory-leaks-for-xmlACatalogAdd.patch",
"Fix-memory-leaks-in-xmlACatalogAdd-when-xmlHashAddEntry-failed.patch",
"backport-CVE-2022-40303-Fix-integer-overflows-with-XML_PARSE_.patch",
"backport-CVE-2022-40304-Fix-dict-corruption-caused-by-entity-.patch",
"backport-schemas-Fix-null-pointer-deref-in-xmlSchemaCheckCOSS.patch",
"libxml2-multilib.patch",
"CVE-2023-45322-pre-patch.patch",
"CVE-2023-45322.patch"
]
for patch in patch_file:
file_path = os.path.join(args.source_file, patch)
apply_patch(file_path, target_dir)
def main():
libpng_path = argparse.ArgumentParser()
libpng_path.add_argument('--gen-dir', help='generate path of libxml2')
libpng_path.add_argument('--source-file', help='libxml2 source compressed dir')
args = libpng_path.parse_args()
tar_file_path = os.path.join(args.source_file, "libxml2-2.9.14.tar.xz")
target_dir = os.path.join(args.gen_dir, "libxml2-2.9.14")
untar_file(tar_file_path, target_dir, args)
do_patch(args, target_dir)
return 0
if __name__ == '__main__':
sys.exit(main())