Logo
componentabseil-cpp
Name
abseil-cpp
Version
20240722
Type
library
Description
-
Licenses
-
PURL
-
CPE
cpe:2.3:a:abseil:common_libraries:20240722.1:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
openwrt-25.12
20240722.1-r1

Patches#


#
Title
Author
Resolve
1
Remove maes option from cross-compilation
Sinan Kaya <sinan.kaya@microsoft.com>
2
absl: always use <asm/sgidefs.h>
Khem Raj <raj.khem@gmail.com>
3
Remove neon option from cross compilation
Jonas Gorski <jonas.gorski@bisdn.de>
4
Don't match -Wnon-virtual-dtor in the "flags are needed to
Derek Mauro <dmauro@google.com>
5
abseil: ppc fixes
Khem Raj <raj.khem@gmail.com>

Vulnerabilities#


Name
Analysis
Description
Exploitable
There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1