[CVE-2018-17942] vasnprintf: Fix heap memory overrun bug.

Reported by Ben Pfaff <blp@cs.stanford.edu> in
<https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html>.

* lib/vasnprintf.c (convert_to_decimal): Allocate one more byte of
memory.

Change-Id: I3e78111a16ac31b690caa29c1dfbb1cb7262ecd1
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>

Fix build error

[   20s] /usr/lib/gcc/armv7l-tizen-linux-gnueabi/9.2.0/../../../../armv7l-tizen-linux-gnueabi/bin/ld: ../lib/libcpio.a(argp-help.o): in function `_option_is_short':
[   20s] /home/abuild/rpmbuild/BUILD/cpio-2.8/lib/argp.h:595: multiple definition of `_option_is_short'; main.o:/home/abuild/rpmbuild/BUILD/cpio-2.8/src/../lib/argp.h:595: first defined here

Change-Id: If0c4d5c82f0d9b403069494be387b21f093db3f4
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>

Bump to cpio 2.8

[Model] ALL
[BinType] AP
[Customer] OPEN

[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A

[Problem] GPL3 license issue at CPIO-2.9
[Cause & Measure] downgrade to CPIO-2.8 (GPL2)
[Checking Method] cpio binary execute

[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A

Change-Id: I456b4a0e2410b6b16588dbb7ec35bdfd4ba5d640
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>

Imported Upstream version 2.8

Change-Id: Ib1703b258064a279859239ec142504f5d50d3114
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>

Initial empty repository