More information on: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976228
| A buffer overflow in the dlt_filter_load function in dlt_common.c in
| dlt-daemon 2.8.5 (GENIVI Diagnostic Log and Trace) allows arbitrary
| code execution because fscanf is misused (no limit on the number of
| characters to be read in a format argument).
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
such as udp-connection dlt-system dlt-filetransfer and if systemd is enabled also:
- systemd
- systemd-watchdog
- systemd-journal
- dlt-examples
- dlt-adaptor
- dlt-console
rationale is:
all of the keys above are not that heavy in building and running,
and dlt-daemon doesn't take more than some seconds to build.
Not building them by default can result in a lot of missing functionalities
to the end user, such as the ability to talk with the dlt-daemon via
bash script or Python.
The end user can still change or disable something if needed.
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>