File fix-CVE-2022-26280.patch of Package libarchive.26538

Overview Repositories Revisions Requests Users Attributes Meta

File fix-CVE-2022-26280.patch of Package libarchive.26538

From cfaa28168a07ea4a53276b63068f94fce37d6aff Mon Sep 17 00:00:00 2001
From: Tim Kientzle <kientzle@acm.org>
Date: Thu, 24 Mar 2022 10:35:00 +0100
Subject: [PATCH] ZIP reader: fix possible out-of-bounds read in
 zipx_lzma_alone_init()

Fixes #1672
---
 libarchive/archive_read_support_format_zip.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Index: libarchive-3.4.2/libarchive/archive_read_support_format_zip.c
===================================================================
--- libarchive-3.4.2.orig/libarchive/archive_read_support_format_zip.c
+++ libarchive-3.4.2/libarchive/archive_read_support_format_zip.c
@@ -1596,7 +1596,7 @@ zipx_lzma_alone_init(struct archive_read
 	 */
 
 	/* Read magic1,magic2,lzma_params from the ZIPX stream. */
-	if((p = __archive_read_ahead(a, 9, NULL)) == NULL) {
+	if(zip->entry_bytes_remaining < 9 || (p = __archive_read_ahead(a, 9, NULL)) == NULL) {
 		archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
 		    "Truncated lzma data");
 		return (ARCHIVE_FATAL);

Places

File fix-CVE-2022-26280.patch of Package libarchive.26538

Places