openwrt-mirror/packages
1
0
Fork 0
mirror of https://github.com/openwrt/packages.git synced 2025-12-24 04:08:21 +04:00
Code Issues Packages Projects Releases Wiki Activity

unzip: patch CVE-2015-7696, CVE-2015-7697 and integer underflow

Browse Source 
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
This commit is contained in:
Álvaro Fernández Rojas
2015-11-01 16:19:56 +01:00
parent 637bc76c06
commit b88213b3a7
4 changed files with 58 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
utils/unzip/patches/005-CVE-2015-7696-heap-overflow.patch Normal file
View File

@@ -0,0 +1,21 @@
--- a/crypt.c
+++ b/crypt.c
@@ -465,7 +465,17 @@ int decrypt(__G__ passwrd)
GLOBAL(pInfo->encrypted) = FALSE;
defer_leftover_input(__G);
for (n = 0; n < RAND_HEAD_LEN; n++) {
- b = NEXTBYTE;
+ /* 2012-11-23 SMS. (OUSPG report.)
+ * Quit early if compressed size < HEAD_LEN. The resulting
+ * error message ("unable to get password") could be improved,
+ * but it's better than trying to read nonexistent data, and
+ * then continuing with a negative G.csize. (See
+ * fileio.c:readbyte()).
+ */
+ if ((b = NEXTBYTE) == (ush)EOF)
+ {
+ return PK_ERR;
+ }
h[n] = (uch)b;
Trace((stdout, " (%02x)", h[n]));
}