Skip to content

Commit

Permalink
Apply patch for GMP CVE-2021-43618 (#45375)
Browse files Browse the repository at this point in the history 
* Apply patch for GMP CVE-2021-43618

* Update checksums

(cherry picked from commit dea9805)
  • Loading branch information
@ViralBShah @staticfloat
ViralBShah authored and staticfloat committed Dec 22, 2022
1 parent f562374 commit 1f0cff5
Show file tree
Hide file tree
Showing 6 changed files with 88 additions and 63 deletions.
2 changes: 1 addition & 1 deletion deps/Versions.make
View file
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ DSFMT_VER := 2.2.4
DSFMT_JLL_NAME := dSFMT

# GMP
GMP_VER := 6.2.0
GMP_VER := 6.2.1
GMP_JLL_NAME := GMP

# LibCURL
Expand Down
120 changes: 60 additions & 60 deletions deps/checksums/gmp
View file
Original file line number Diff line number Diff line change
@@ -1,60 +1,60 @@
GMP.v6.2.0+5.aarch64-apple-darwin.tar.gz/md5/5f75eae2bc2bfe01900fc079443bc713
GMP.v6.2.0+5.aarch64-apple-darwin.tar.gz/sha512/4beb187fc6999ef59b0f76fbf0a106f828580f34627585b090237c227b3bde71ea7e6b7e9f47efc4d0778663ea8f44e8a49a87e16967bc08a6d9df8c975a517e
GMP.v6.2.0+5.aarch64-linux-gnu-cxx03.tar.gz/md5/0df64b64219c8670fcccb5029d352617
GMP.v6.2.0+5.aarch64-linux-gnu-cxx03.tar.gz/sha512/3cb845af24efae59a458b27c03873ad08efbef8a844fc3f4a19843e62f42b86777c86b156485a40dd8e1dda2d93891b98a473b82ab1273c8ec0bfd43fd9b83f7
GMP.v6.2.0+5.aarch64-linux-gnu-cxx11.tar.gz/md5/9290a852a885516e2418a19146ae105a
GMP.v6.2.0+5.aarch64-linux-gnu-cxx11.tar.gz/sha512/b5078656ad0ca03556bb87bd077934553caa12d11df6641a172688a58f6e54955f72b198af1bded9caaea7defb76f884077109fc66a4eefd98d3d1240c6c8bc9
GMP.v6.2.0+5.aarch64-linux-musl-cxx03.tar.gz/md5/085072bd7713a747e66cc20428691fe7
GMP.v6.2.0+5.aarch64-linux-musl-cxx03.tar.gz/sha512/611025f6287cc19d882414a17ab2a0888dfe65bf4715513456349cb4fc89ef218194449c3c49019a8773ea1a9c5e753214c5457aff338491aed7d3b6c61c3113
GMP.v6.2.0+5.aarch64-linux-musl-cxx11.tar.gz/md5/e0a580e0d4ca4981d7113c87c6a72ed2
GMP.v6.2.0+5.aarch64-linux-musl-cxx11.tar.gz/sha512/1167143852e40071fbb9895d868555f85a15a22b85a74360c96e2c3397108adc211a54615bfa4fd464b5c34ccd33254371432d1fdd7dfae19088d0b6b77f9d6a
GMP.v6.2.0+5.armv6l-linux-gnueabihf-cxx03.tar.gz/md5/6b564f8a10a9499c32286216ba2ef64e
GMP.v6.2.0+5.armv6l-linux-gnueabihf-cxx03.tar.gz/sha512/4bccef0f8580dffee7b3fb9b950d7bc22dc7a898ad38f1b3e180b8f4f3e8a6420f39f537f8fd7c9bd08257f22a20dd342b1e1ad2d09333af81d7d02a1f8a3a9f
GMP.v6.2.0+5.armv6l-linux-gnueabihf-cxx11.tar.gz/md5/cec6daeca638ffb03a412cc0e44848ef
GMP.v6.2.0+5.armv6l-linux-gnueabihf-cxx11.tar.gz/sha512/4cbef04ec7d1449a6d1d689db281935a4c7c61aa3ce26b1bed23e08e5950fef56bcc0b98b2636068a7b5adb3554a054d3c0024cb9d87ebea94e24ff3e0f19614
GMP.v6.2.0+5.armv6l-linux-musleabihf-cxx03.tar.gz/md5/6f197412d758a1afc9327fc7f1a1ce53
GMP.v6.2.0+5.armv6l-linux-musleabihf-cxx03.tar.gz/sha512/d242f4d1ac713bd5994d46280a55b0f4298b4ae82536570903a55fb15db56f97b1b4872799f9b52116942d6dc5865a2f14c087e352b6b444d3697c8917f14cbc
GMP.v6.2.0+5.armv6l-linux-musleabihf-cxx11.tar.gz/md5/7d9f00a3f319c2bfe45b6ac6a686d35e
GMP.v6.2.0+5.armv6l-linux-musleabihf-cxx11.tar.gz/sha512/8cc82095b3db04da2c3ee8003d328d96475a7ebe138852be91500dabcc2501c9cc8936d6a0b2f99b666f7934a738f62cbc6af8915f1cafd42c9353ecb9dceed0
GMP.v6.2.0+5.armv7l-linux-gnueabihf-cxx03.tar.gz/md5/f7c3a1915bc8ddd73bfe33899f06bcbd
GMP.v6.2.0+5.armv7l-linux-gnueabihf-cxx03.tar.gz/sha512/f9a72432fdc578165df066ee46eaeef0b6d44018cc041ed7c4cac8cb82d5069fcde12733bdefce318e48970e45b11fd78f6c2ebc36dd8e8324467c19214c5197
GMP.v6.2.0+5.armv7l-linux-gnueabihf-cxx11.tar.gz/md5/9644266ed5c8f0f5ef87f07ee8d758a9
GMP.v6.2.0+5.armv7l-linux-gnueabihf-cxx11.tar.gz/sha512/fb8586e87bba6c3950095f1273b1c0a70a5ad52c34379fce0c886669334f61cb24fc55224e0bfdf80070888e7bd1696f154a6409cecbe3dc9968a20277598935
GMP.v6.2.0+5.armv7l-linux-musleabihf-cxx03.tar.gz/md5/1444f907bd9ea868b056d63a4ae92558
GMP.v6.2.0+5.armv7l-linux-musleabihf-cxx03.tar.gz/sha512/02799c2e0fbc2adcc5da16765946bc6972024f8b46ed51c341add754c4873d38437e09b61a75658b0042b2ae18c32abbf10f87021a661254be717534ce17a37c
GMP.v6.2.0+5.armv7l-linux-musleabihf-cxx11.tar.gz/md5/c0d5ea9800c7a488a609979e3a0880ea
GMP.v6.2.0+5.armv7l-linux-musleabihf-cxx11.tar.gz/sha512/b8307100b9c9fb9fc112bea4347b804842aa144c03e739cbee74718ecc27e9af5df60c81a7768f23ddee5dd27b85053289962777e62dc19b9960e3c0265c0e88
GMP.v6.2.0+5.i686-linux-gnu-cxx03.tar.gz/md5/88c7c248c87298fcce367f4795a7926c
GMP.v6.2.0+5.i686-linux-gnu-cxx03.tar.gz/sha512/4832aa5064fdfb1c347048f3c26942689e56e38139fc404d8d7624a0fe03c1a303b94a4bbd2f52d72c712f8e62f656be529def1a6fefc3fe78c634710ba70ed2
GMP.v6.2.0+5.i686-linux-gnu-cxx11.tar.gz/md5/d1ed99747cc28883d0d9c5d86977d46f
GMP.v6.2.0+5.i686-linux-gnu-cxx11.tar.gz/sha512/6b9307fe61e79f7ad59e5d78b7ca2f2bf8546e7e2badd9862bf2ec95ea86bedec7d4b5563bb08dd00adfd2fe4777976170eba99a0932173e50ce72b0d59c971d
GMP.v6.2.0+5.i686-linux-musl-cxx03.tar.gz/md5/fa901a508f5d1d1ba951a1b9e038a2db
GMP.v6.2.0+5.i686-linux-musl-cxx03.tar.gz/sha512/477c8f46d81500bbc45392b448e7a054913d0d9d7e28b153c70891eb001f6860b79ab76c8131a596be3bb4983bbf555f584666094a8a573c3574f32e808fac57
GMP.v6.2.0+5.i686-linux-musl-cxx11.tar.gz/md5/f72fb32460189553204e4bc1c0f957d3
GMP.v6.2.0+5.i686-linux-musl-cxx11.tar.gz/sha512/ca4c57f147b6795087cc706572f2c61041ea74b463eec436ec4f8695e06df66b844d1fd2ffcd7ef777987f397e594a6f267ba19f3d2c5973dce9d55fcfa5f47a
GMP.v6.2.0+5.i686-w64-mingw32-cxx03.tar.gz/md5/04e6de93662ebda2a8c4604f5066b8e1
GMP.v6.2.0+5.i686-w64-mingw32-cxx03.tar.gz/sha512/d131360b19fe1d8e45091f60c8056e71ec14a551b7d6192625c9777ba5daac327326c1d3211bc5459b5f0f2d466f9fb112bb5f6e7ab0e71d560068911eb0b6d9
GMP.v6.2.0+5.i686-w64-mingw32-cxx11.tar.gz/md5/7cc18e6f73476c58bc13e9bf2cf7daf8
GMP.v6.2.0+5.i686-w64-mingw32-cxx11.tar.gz/sha512/312e96cf2e7b45fc8994998b0aa616d72a4bf9f5a7055416c484bd7dcc3df81365b15465f6cd24c0e2529cd4bee67c07f49fe9ceb2b067770db0965d880cb9c0
GMP.v6.2.0+5.powerpc64le-linux-gnu-cxx03.tar.gz/md5/27192e9ffab4fd8449a33cbed329a27a
GMP.v6.2.0+5.powerpc64le-linux-gnu-cxx03.tar.gz/sha512/f826bfa5a29c443bc902930810f032877f623341f403dd4c532f7105acf647c983570a555c74c3273b4887a5dce3ae97cf4fe88d0f139411d632c3d24451fbc7
GMP.v6.2.0+5.powerpc64le-linux-gnu-cxx11.tar.gz/md5/85050f4b290dea72629cc14935523981
GMP.v6.2.0+5.powerpc64le-linux-gnu-cxx11.tar.gz/sha512/b272fd8ca4802860ecda1727ffc07479a9bb9afa35850bddb624644fff0641607070b5ecfb9ff8e05efd59d5739fed3b32a7163d56440a7c103aab1b5f81a3fb
GMP.v6.2.0+5.x86_64-apple-darwin.tar.gz/md5/245ffa4fc5ea5bfb42deb69d743630b5
GMP.v6.2.0+5.x86_64-apple-darwin.tar.gz/sha512/da99905c7894e4a6a8f1b5edbc9fa94be4d69df0d76ff8816d562e2191da35209d5e79cd2d004f717018e750a0043f1c749bcac2c7742636b1b755a1b77f7d24
GMP.v6.2.0+5.x86_64-linux-gnu-cxx03.tar.gz/md5/6d313a77ff5de004d51110e4df39e117
GMP.v6.2.0+5.x86_64-linux-gnu-cxx03.tar.gz/sha512/3f2594d81dc48170c6f8f003b443703b07078aa0a3ff94432532b3dfd54d3b73ba88b04a77de35a8b8ef07fa139d9e32380ec7d5d638944eb1732b081fbccebc
GMP.v6.2.0+5.x86_64-linux-gnu-cxx11.tar.gz/md5/b5872c5a1b9fdae506e5abb9efe7953a
GMP.v6.2.0+5.x86_64-linux-gnu-cxx11.tar.gz/sha512/f4399c990b6aa773587ef9446c353911981ade9b845cb4b995c2eac26e8b85bb06270d1ea1231bc3b03675b2a1a4b3d01ae313d316a032fd9f6cc1d514fe0ebf
GMP.v6.2.0+5.x86_64-linux-musl-cxx03.tar.gz/md5/addb58e3359ca2d79a2ffac4a762f160
GMP.v6.2.0+5.x86_64-linux-musl-cxx03.tar.gz/sha512/9807daba6b24551148bf22f33694a85d070be4f5ce749ac8b3089a61ce99062ba55c8ac9435360da7acdc87ad745258b8dae476ca3acce5baf3a4c0d94cf803a
GMP.v6.2.0+5.x86_64-linux-musl-cxx11.tar.gz/md5/1ff1128fd9b104e965a1902b86d84b9a
GMP.v6.2.0+5.x86_64-linux-musl-cxx11.tar.gz/sha512/ef4f7ac863156479fde6d296ca4c9b8b86e3a7b51b9fa0a6a962543a95be06b1d15b5824827e7dcd6a6cc0f67ef4e11458af0f4bfc7f4e1ec89118ebc7039819
GMP.v6.2.0+5.x86_64-unknown-freebsd.tar.gz/md5/da8e2ed39d01c8c94e3ac6938ad2125b
GMP.v6.2.0+5.x86_64-unknown-freebsd.tar.gz/sha512/942fef1bb6eb778d56fecd65d3a2d8df5dc0203572fc9b5e4342a0c4ca9585273bb7edad72aafca3ced8c4079573a74dabee2b9350e021a3af29b16e4dca3eee
GMP.v6.2.0+5.x86_64-w64-mingw32-cxx03.tar.gz/md5/c03c2273b6add1a64249072f584bca5b
GMP.v6.2.0+5.x86_64-w64-mingw32-cxx03.tar.gz/sha512/f65483d17003a9787dad32fe1ad8851963a2360fc3f7cc15619f2aae815416a7bc0953df3fdcea271a2a0e50403b167e2ca0825243f7a9aef4f69cbcaaebff3b
GMP.v6.2.0+5.x86_64-w64-mingw32-cxx11.tar.gz/md5/3eebe834583990ac58698988e8b1b6a9
GMP.v6.2.0+5.x86_64-w64-mingw32-cxx11.tar.gz/sha512/1f70c06992fb667bcaf754bc33a81d836f0ad02bb8e5388259741ee5802afc8308fef7688a3ae90c281f7cf9a94ccbb6e82488de0c0c3bee8615ab03e65adc62
gmp-6.2.0.tar.bz2/md5/c24161e0dd44cae78cd5f67193492a21
gmp-6.2.0.tar.bz2/sha512/ff22ed47fff176ed56301ecab0213316150a3abb370fed031635804f829c878296d7c65597b1f687f394479eef04fae6eba771162f7d363dc4c94c7334fc1fc0
GMP.v6.2.1+2.aarch64-apple-darwin.tar.gz/md5/37a4c537149a1d6d7424833294e61dac
GMP.v6.2.1+2.aarch64-apple-darwin.tar.gz/sha512/33dd86279b5b3b08496180c92971c2e7ef84715e9ed3a80071a178ee94de6231ea3cf7b4dd4fa7e0dbd0b386a1a04c4f6b28446e86cb92c100ebb295b2f5ee3a
GMP.v6.2.1+2.aarch64-linux-gnu-cxx03.tar.gz/md5/44ef76b228cdc4cf54e5d4b40a29034d
GMP.v6.2.1+2.aarch64-linux-gnu-cxx03.tar.gz/sha512/255a680c75d3e8ca542dffc47050adfce038e25a12a4131c18dc719d36b364c1a6488ee5743d1c5de445b4bc5ccbb932399f7071083d86fe5bd2befc521cfbfd
GMP.v6.2.1+2.aarch64-linux-gnu-cxx11.tar.gz/md5/0289ffc3621b5d62dc2f9e1b36c41f9f
GMP.v6.2.1+2.aarch64-linux-gnu-cxx11.tar.gz/sha512/f27b82efb5aa1d7eaaed7574d3312969664eac38f45cf40c6de13ca20b256d45481546fc1a402e6c04bee416c842a092a4e57b8df702bbcdc52f742555d07aa7
GMP.v6.2.1+2.aarch64-linux-musl-cxx03.tar.gz/md5/9ff4c76804f59056b49a9bf5b6a02099
GMP.v6.2.1+2.aarch64-linux-musl-cxx03.tar.gz/sha512/d86afa10bdc4e20fa259a17ce7d0a5dca2524b42752bc7d5c33e4323973587d234d4c420900deef34670bfce8ab8c6725e7edb45bfd3896b2644a42ec187dfd7
GMP.v6.2.1+2.aarch64-linux-musl-cxx11.tar.gz/md5/cc9857a965afcdcbc2b378a368360690
GMP.v6.2.1+2.aarch64-linux-musl-cxx11.tar.gz/sha512/c46bff9fdcbecc71c12914dadb31ee9fd5b4293cb45bda782200daa18d7f7e8b588e0c0f68a39c2fec7cc3d026bcef3620dae35ae2dd3acf2505dcfc084d11bd
GMP.v6.2.1+2.armv6l-linux-gnueabihf-cxx03.tar.gz/md5/5b3343367896e31b29571fe0d2b90390
GMP.v6.2.1+2.armv6l-linux-gnueabihf-cxx03.tar.gz/sha512/65a501db63c386727aa336d6dbecdff0417628bc9ff7ac1b2161922246d94f8caa71b63fc3789ec6bb10aff03b96d5d0c22c37c82bd95d74e557df8de7e8a09c
GMP.v6.2.1+2.armv6l-linux-gnueabihf-cxx11.tar.gz/md5/cc04dda18412fa11f228e66eb5a03aad
GMP.v6.2.1+2.armv6l-linux-gnueabihf-cxx11.tar.gz/sha512/49fdd452fe8f0129ee06795e04a0cc0238132f9d6f60a124dd2c7395fabbb71f005c16d95fdc00d87f8bf82b048cc54e07f162fbc38223c644854cc72c4d26b0
GMP.v6.2.1+2.armv6l-linux-musleabihf-cxx03.tar.gz/md5/675599595f3dedb8ca11151168da7110
GMP.v6.2.1+2.armv6l-linux-musleabihf-cxx03.tar.gz/sha512/eedcdc2230fd81d613d54be356679a97b59491f5f9a17c518239b5504c3dd5da15721d553f57ae21f1c55d253e808e7afd1d1651b8c666379c55c7b48f71217e
GMP.v6.2.1+2.armv6l-linux-musleabihf-cxx11.tar.gz/md5/9a74abbc46439ae8268ca926f0045691
GMP.v6.2.1+2.armv6l-linux-musleabihf-cxx11.tar.gz/sha512/6329506f7a886d0dd907b051d6cbab1bd0cd21b2d5715f55402bf9ad6cb1ae33e058931bdf6cba17658b0e455f9e4fb7f9aad274755a159106cfe1c4d1ea328a
GMP.v6.2.1+2.armv7l-linux-gnueabihf-cxx03.tar.gz/md5/8c20e0def927a202f2d23aed78aadb4a
GMP.v6.2.1+2.armv7l-linux-gnueabihf-cxx03.tar.gz/sha512/b7f42efae6fce864c9e07714056444ba74befb9cc9a766ffe14e676240f23f83d3241b1bf3a8f4a282acbdc197287fffb27dadedf3055505ad63bb0b9df573c6
GMP.v6.2.1+2.armv7l-linux-gnueabihf-cxx11.tar.gz/md5/423a625816b3c52efa6021e76f6009b7
GMP.v6.2.1+2.armv7l-linux-gnueabihf-cxx11.tar.gz/sha512/21cbbfd647d4a7c884344dc66e0fd83d654d22c3338669539e8eab515bdc6bbd772b47f949d28280789e4343e9a8d6319a73dc9e11c23da381b8a452ef7fb098
GMP.v6.2.1+2.armv7l-linux-musleabihf-cxx03.tar.gz/md5/7d67f981538d7a69ab1e458a54bf56f4
GMP.v6.2.1+2.armv7l-linux-musleabihf-cxx03.tar.gz/sha512/8aefbcddc326d4ef289dcdba8d3bd56a5f9656a7be30c83b4dbd9a0b8ee26a963c6a2f4294c94b8a8f2f712f1e1c9e17b8b9dcc9967d64294ca466e51656f7c7
GMP.v6.2.1+2.armv7l-linux-musleabihf-cxx11.tar.gz/md5/ed8713b71636ea75fcc0c9fbc4a8618d
GMP.v6.2.1+2.armv7l-linux-musleabihf-cxx11.tar.gz/sha512/d7f50d06a256fd9176d5fbf682ff599a5ffba62bb35fb37321ab41e88970921a9d9fa4531bd74e73e471c7e15fcae568d0536d3e32a2b2d7f81dc9cd1f0c039f
GMP.v6.2.1+2.i686-linux-gnu-cxx03.tar.gz/md5/875f0bc57172788cb80ca2b80ff3065f
GMP.v6.2.1+2.i686-linux-gnu-cxx03.tar.gz/sha512/808a3c2422b5168260dbf7a3875d5c8151e10b20a8ec87a66bf08f71ad7cf5de20fb7a4f3457c3ab2b4ffc9627764c743baa96f409629c70f2233ea7a5b628b9
GMP.v6.2.1+2.i686-linux-gnu-cxx11.tar.gz/md5/09ae13f2a6a0dc317d2bca5700d2bf59
GMP.v6.2.1+2.i686-linux-gnu-cxx11.tar.gz/sha512/9c986e2904247de937e30c05b29e0179986d7747b217468c59bc56af6d4c48d4575f24dace521dc8d66d84230eebd695fe0538972bfd744182ca940a23a9239c
GMP.v6.2.1+2.i686-linux-musl-cxx03.tar.gz/md5/45f53fd95dd69a6ee6b43463976b5aa6
GMP.v6.2.1+2.i686-linux-musl-cxx03.tar.gz/sha512/4df57d6c88f0ff86e0ee78da8f6ad02decf7a38884ae8c785c114e0e38e791b733e0d046c90712327c08645dd40b7f0391fcb3258cb3bfb8b6a62c59c27d6e83
GMP.v6.2.1+2.i686-linux-musl-cxx11.tar.gz/md5/8b15988bfb1ba0543eefab73b3ac3439
GMP.v6.2.1+2.i686-linux-musl-cxx11.tar.gz/sha512/e32dec7ded9bf6fc26033df83521481dde851c68d7cc45efaabeded7603417cdc5016de45f78a956b69aaed00a55a91aa8b1cd5bbe5431b01074dafce2c47751
GMP.v6.2.1+2.i686-w64-mingw32-cxx03.tar.gz/md5/4138d0b5185f722aef4e1f215f381275
GMP.v6.2.1+2.i686-w64-mingw32-cxx03.tar.gz/sha512/255d4ecf178b9440b667c56e542baa4422d731f83a67accd41b76268274c2344fbbf94979fddbbd1f6b5751bac2d228a8ef49a93365de78c1772146edd1b4845
GMP.v6.2.1+2.i686-w64-mingw32-cxx11.tar.gz/md5/606b4b453af25ded1323aee9e085c132
GMP.v6.2.1+2.i686-w64-mingw32-cxx11.tar.gz/sha512/8605b764ff6e5d81767432fd8e70c25c5ad76f2cac7c2b3d6ed0596df692300973803487c970a896a0a316d46de3e3cae31b21d4e11fe2961e228cd389da13da
GMP.v6.2.1+2.powerpc64le-linux-gnu-cxx03.tar.gz/md5/3fbd157df4ae738da6820b26fb75e75e
GMP.v6.2.1+2.powerpc64le-linux-gnu-cxx03.tar.gz/sha512/6e64c5c4e393c0001bd7085e627126134b5999c2d8df2fa9b72c9f9835d6b0f0ad440a2f58fe6537ec446a517f8df2667881871fce9b4d61c356d2b52080d641
GMP.v6.2.1+2.powerpc64le-linux-gnu-cxx11.tar.gz/md5/35608e3166278d52a482d7e19313eca6
GMP.v6.2.1+2.powerpc64le-linux-gnu-cxx11.tar.gz/sha512/a9550fe2b94e0e111a487159c0cd8fb6f1a21b8941ada7bb281572079dbbece921f80b0275bcc8f88117ecc72e7f8e93219350f5444b67295620db1aa9ae947d
GMP.v6.2.1+2.x86_64-apple-darwin.tar.gz/md5/b5004a436660a2533b94b41c592b686c
GMP.v6.2.1+2.x86_64-apple-darwin.tar.gz/sha512/b7b4dc8025ce304c5b899084f42c8f5aad5bbe03509bada17dbe6be952f98306729180a22b5d0a095692f349406db0b98f99f5e3f2be5f2165825e6f7f7d1813
GMP.v6.2.1+2.x86_64-linux-gnu-cxx03.tar.gz/md5/47ba899c9ac714a4594f999d845f45cf
GMP.v6.2.1+2.x86_64-linux-gnu-cxx03.tar.gz/sha512/99624ec71865d6285ab409ef54f4cf12ba246de6233de56a2fb9f70806574891539efed32e711202003570c157918fde8d53534c695fd5b8476e0d4e0ecd1bd4
GMP.v6.2.1+2.x86_64-linux-gnu-cxx11.tar.gz/md5/3b0c1258ecafcaf96e549f9b979420ee
GMP.v6.2.1+2.x86_64-linux-gnu-cxx11.tar.gz/sha512/b94d8f25d23597f96cc0cf0aebd1708755a8714ec4a481108add852b77addc737d3d8feba566ec410db019698ca2de826583b1a6105f0d2188679e7f72331df0
GMP.v6.2.1+2.x86_64-linux-musl-cxx03.tar.gz/md5/061cfe5f416c1365e98d6b1ed89abd63
GMP.v6.2.1+2.x86_64-linux-musl-cxx03.tar.gz/sha512/b6847f7ff599fa811851788a6ec6ce69ba02dbb3672d0a64b03b7056b35215536b059287709b3d207bc977094e994a7d744061b7ecf95886510285489bb89578
GMP.v6.2.1+2.x86_64-linux-musl-cxx11.tar.gz/md5/81911acbc0c3607338c6455b1798cab8
GMP.v6.2.1+2.x86_64-linux-musl-cxx11.tar.gz/sha512/e007441194abc5c80d9521a17e2ab9e6fb54f319571f4045fec2f7464ffaa99652d3252416c15d110dbf9deaad2c1dc94f81c638e28ce620cf543f554eb7d1e0
GMP.v6.2.1+2.x86_64-unknown-freebsd.tar.gz/md5/ef7173194848e8d00d73ef05fc520f0e
GMP.v6.2.1+2.x86_64-unknown-freebsd.tar.gz/sha512/512c3cf8fb951fe0ef7b1715b78202d0bdf5844fe33e16c4674a19e6335440fb5352d7bde71fce83e8e373efe43281d05b160b11657a582a9d3a0201ce97a189
GMP.v6.2.1+2.x86_64-w64-mingw32-cxx03.tar.gz/md5/882c6749f217f5a691b744ef728ad089
GMP.v6.2.1+2.x86_64-w64-mingw32-cxx03.tar.gz/sha512/53424ad8a9dcfb8e0e738d4521b2ab1c75aaf54668a54a76b8bcab2404308e69b531dc25b3dc18bc8eaa7ebd9e2914d6624c5d371e6c0ecb9e8d24aa575e99ab
GMP.v6.2.1+2.x86_64-w64-mingw32-cxx11.tar.gz/md5/bcdd7bcbc69161744397d249a9c82e45
GMP.v6.2.1+2.x86_64-w64-mingw32-cxx11.tar.gz/sha512/b7f8fb4f5aaf5034d4d2f60e29cc7b5e06c13d4b677af30f30831e1fc95925a575275ebffda36efcc09e29ccd78ba56475c1be3ad0627e28862057764f1ef74e
gmp-6.2.1.tar.bz2/md5/28971fc21cf028042d4897f02fd355ea
gmp-6.2.1.tar.bz2/sha512/8904334a3bcc5c896ececabc75cda9dec642e401fb5397c4992c4fabea5e962c9ce8bd44e8e4233c34e55c8010cc28db0545f5f750cbdbb5f00af538dc763be9
1 change: 1 addition & 0 deletions deps/gmp.mk
View file
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,7 @@ $(SRCCACHE)/gmp-$(GMP_VER)/build-patched: $(SRCCACHE)/gmp-$(GMP_VER)/source-extr
cd $(dir $@) && patch -p1 < $(SRCDIR)/patches/gmp-exception.patch
cd $(dir $@) && patch -p1 < $(SRCDIR)/patches/gmp_alloc_overflow_func.patch
cd $(dir $@) && patch -p1 < $(SRCDIR)/patches/gmp-apple-arm64.patch
cd $(dir $@) && patch -p1 < $(SRCDIR)/patches/gmp-CVE-2021-43618.patch
echo 1 > $@

$(BUILDDIR)/gmp-$(GMP_VER)/build-configured: $(SRCCACHE)/gmp-$(GMP_VER)/source-extracted
Expand Down
24 changes: 24 additions & 0 deletions deps/patches/gmp-CVE-2021-43618.patch
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
# Origin: https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e
# HG changeset patch
# User Marco Bodrato <[email protected]>
# Date 1634836009 -7200
# Node ID 561a9c25298e17bb01896801ff353546c6923dbd
# Parent e1fd9db13b475209a864577237ea4b9105b3e96e
mpz/inp_raw.c: Avoid bit size overflows

diff -r e1fd9db13b47 -r 561a9c25298e mpz/inp_raw.c
--- a/mpz/inp_raw.c Tue Dec 22 23:49:51 2020 +0100
+++ b/mpz/inp_raw.c Thu Oct 21 19:06:49 2021 +0200
@@ -88,8 +88,11 @@

abs_csize = ABS (csize);

+ if (UNLIKELY (abs_csize > ~(mp_bitcnt_t) 0 / 8))
+ return 0; /* Bit size overflows */
+
/* round up to a multiple of limbs */
- abs_xsize = BITS_TO_LIMBS (abs_csize*8);
+ abs_xsize = BITS_TO_LIMBS ((mp_bitcnt_t) abs_csize * 8);

if (abs_xsize != 0)
{
2 changes: 1 addition & 1 deletion stdlib/GMP_jll/Project.toml
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name = "GMP_jll"
uuid = "781609d7-10c4-51f6-84f2-b8444358ff6d"
version = "6.2.0+5"
version = "6.2.1+2"

[deps]
Libdl = "8f399da3-3557-5675-b5ff-fb832c97cbdb"
Expand Down
2 changes: 1 addition & 1 deletion stdlib/GMP_jll/test/runtests.jl
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,5 +4,5 @@ using Test, Libdl, GMP_jll

@testset "GMP_jll" begin
vn = VersionNumber(unsafe_string(unsafe_load(cglobal((:__gmp_version, libgmp), Ptr{Cchar}))))
@test vn == v"6.2.0"
@test vn == v"6.2.1"
end

0 comments on commit 1f0cff5

Please sign in to comment.