openwrt-mirror/packages
1
0
Fork 0
mirror of https://github.com/openwrt/packages.git synced 2025-12-26 11:16:31 +04:00
Code Issues Packages Projects Releases Wiki Activity

unzip: patch CVE-2015-7696, CVE-2015-7697 and integer underflow

Browse Source 
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
This commit is contained in:
Álvaro Fernández Rojas
2015-11-01 16:19:56 +01:00
parent 637bc76c06
commit b88213b3a7
4 changed files with 58 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
utils/unzip/patches/006-CVE-2015-7697-infinite-loop.patch Normal file
View File

@@ -0,0 +1,15 @@
--- a/extract.c
+++ b/extract.c
@@ -2728,6 +2728,12 @@ __GDEF
int repeated_buf_err;
bz_stream bstrm;
+ if (G.incnt <= 0 && G.csize <= 0L) {
+ /* avoid an infinite loop */
+ Trace((stderr, "UZbunzip2() got empty input\n"));
+ return 2;
+ }
+
#if (defined(DLL) && !defined(NO_SLIDE_REDIR))
if (G.redirect_slide)
wsize = G.redirect_size, redirSlide = G.redirect_buffer;