已关闭
fix: CVE-2026-27171 crc32_combine CPU consumption (backport of zlib 1.3.2 fix) [OpenHarmony-6.0-Release] #116
fix: CVE-2026-27171 crc32_combine CPU consumption (backport of zlib 1.3.2 fix) [OpenHarmony-6.0-Release] #116
已关闭
wu-jinpeng981212创建于 26 天前关闭于 4 天前
wu-jinpeng981212
26 天前

closes #235

Backport of the zlib 1.3.2 fix for CVE-2026-27171 onto this branch (vendored 1.3.1).

Vulnerability: x2nmodp() had no negative-n guard; a negative len2 through crc32_combine64()/crc32_combine_gen64() drove while(n) n >>= 1 without terminating (right-shift of a negative value never reaches zero) → unbounded CPU consumption (7ASECURITY audit).

Complete fix shape (1 file):

  • crc32_combine64() / crc32_combine_gen64(): if (len2 < 0) return 0;
  • x2nmodp() returns uLong; documented "n must not be negative"
  • braid() result cast to z_crc_t; crc32_z() cast last to int

Reachability: crc32.c ships in libz (BUILD.gn static+shared).

DCO Signed-off-by present. Same fix already proposed for master (see the master PR).
Upstream: https://github.com/madler/zlib/releases/tag/v1.3.2
(generated by ohos-cve-autofix)

likedislike
当前Pull Request已关闭, 关闭人@wu-jinpeng981212
wu-jinpeng981212wu-jinpeng981212
26 天前 关联了issue:[security] CVE-2026-27171: crc32_combine CPU consumption — backport to OpenHarmony-6.0-Release
wu-jinpeng981212
wu-jinpeng981212
26 天前 评论:

start build

likedislike
openharmony_ci
openharmony_ci成员
26 天前 评论:

OpenHarmony-6.0-Release所有代码仓合入受控, 请联系分支负责人@shermanzhong: sherman.zhong@huawei.com, @RayShih: shirui721@huawei.com, @GGRong99: gaojinrong@huawei.com任一人评审并评论approve

likedislike
openharmony_ciopenharmony_ci成员
26 天前 添加了label:分支负责人未批准合入
openharmony_ciopenharmony_ci成员
26 天前 添加了label:waiting_on_author
openharmony_ci
openharmony_ci成员
26 天前 评论:

首次触发
门禁构建开始,包含静态检查、代码编译和测试【dayu200_tdd编译, dayu200编译, hispark_taurus_LiteOS测试, dayu200_xts_acts_6.0_release编译, ohos-sdk编译, hispark_taurus_Linux编译, dayu200测试, hispark_taurus_LiteOS编译, dayu200_xts编译】,预计在60分钟内完成,门禁结果会同步发送到注册邮箱。您可以通过如下链接跟踪门禁进展:http://dcp.openharmony.cn/workbench/cicd/detail/6a8d887264650f998bddaacc/runlist

likedislike
openharmony_ci
openharmony_ci成员
26 天前 评论:

感谢提交 Pull Requests!如果您提交的PR已经开发完毕,请评论 "start build" 触发门禁,更多交互操作,请访问OpenHarmony社区支持命令清单。如果需要调整订阅PR、Issue的变更状态,请访问订阅链接


Thanks for submitting the pull request. If your Pull Request has already been developed, you can leave a "start build" comment to trigger the gated system. For more commands, please visit OpenHarmony Command List. If you need to change the subscription of a Pull Request or Issue, please visit the link.

likedislike
openharmony_ciopenharmony_ci成员
26 天前 添加了label:dco检查成功
openharmony_ciopenharmony_ci成员
26 天前 添加了label:静态检查失败
openharmony_ci
openharmony_ci成员
26 天前 评论:

代码门禁未通过
您可以通过如下链接查看门禁报告:http://dcp.openharmony.cn/workbench/cicd/detail/6a8d887264650f998bddaacc/runlist

静态检查:

# check type result report
1 codeCheck noPass >>>

编译测试:
# Device build result package
1 hispark_taurus_LiteOS pending NA
2 hispark_taurus_Linux pending NA
3 ohos-sdk pending NA
4 dayu200 pending NA
5 dayu200_xts pending NA
6 dayu200_tdd pending NA
7 dayu200_xts_acts_6.0_release pending NA

likedislike
wu-jinpeng981212
wu-jinpeng981212
25 天前 评论:

restart build

likedislike
openharmony_ci
openharmony_ci成员
25 天前 评论:

上次构建已结束

likedislike
openharmony_ciopenharmony_ci成员
25 天前 删除了label:静态检查失败
openharmony_ci
openharmony_ci成员
25 天前 评论:

上次构建已超过12小时,重新全量验证,重置所有关联PR的验证状态
门禁构建开始,包含静态检查、代码编译和测试【hispark_taurus_LiteOS编译, dayu200_tdd编译, hispark_taurus_Linux编译, dayu200测试, dayu200_xts_acts_6.0_release编译, hispark_taurus_LiteOS测试, dayu200编译, dayu200_xts编译, ohos-sdk编译】,预计在60分钟内完成,门禁结果会同步发送到注册邮箱。您可以通过如下链接跟踪门禁进展:http://dcp.openharmony.cn/workbench/cicd/detail/6a8fce9364650f998b8d60d6/runlist

likedislike
openharmony_ciopenharmony_ci成员
25 天前 添加了label:静态检查失败
openharmony_ci
openharmony_ci成员
25 天前 评论:

代码门禁未通过
您可以通过如下链接查看门禁报告:http://dcp.openharmony.cn/workbench/cicd/detail/6a8fce9364650f998b8d60d6/runlist

静态检查:

# check type result report
1 codeCheck noPass >>>

编译测试:
# Device build result package
1 hispark_taurus_LiteOS pending NA
2 hispark_taurus_Linux pending NA
3 ohos-sdk pending NA
4 dayu200 pending NA
5 dayu200_xts pending NA
6 dayu200_tdd pending NA
7 dayu200_xts_acts_6.0_release pending NA

likedislike
wu-jinpeng981212wu-jinpeng981212
4 天前 关闭了 pull request