Library That Implements Different Microsoft Compressions
The purpose of libmspack is to provide both compression and
decompression of some loosely related file formats used by Microsoft.
Currently the most common formats are implemented.
- Developed at devel:libraries:c_c++
-
2
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Factory/libmspack && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| baselibs.conf | 0000000011 11 Bytes | |
| libmspack-0.6alpha.tar.gz | 0000476992 466 KB | |
| libmspack.changes | 0000005669 5.54 KB | |
| libmspack.spec | 0000003389 3.31 KB |
Revision 25 (latest revision is 31)
Dominique Leuenberger (dimstar_suse)
accepted
request 566588
from
Adam Majer (adamm)
(revision 25)
- Correct SRPM group. - Fix typo - Update to version 0.6 * read_spaninfo(): a CHM file can have no ResetTable and have a negative length in SpanInfo, which then feeds a negative output length to lzxd_init(), which then sets frame_size to a value of your choosing, the lower 32 bits of output length, larger than LZX_FRAME_SIZE. If the first LZX block is uncompressed, this writes data beyond the end of the window. This issue was raised by ClamAV as CVE-2017-6419. * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the issue mentioned above, these functions now reject negative lengths * cabd_read_string(): add missing error check on result of read(). If an mspack_system implementation returns an error, it's interpreted as a huge positive integer, which leads to reading past the end of the stack-based buffer. This issue was raised by ClamAV as CVE-2017-11423 - Add subpackage for helper tools - Run spec-cleaner
Comments 0