Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP5:GA
libarchive.26538
fix-CVE-2022-26280.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File fix-CVE-2022-26280.patch of Package libarchive.26538
From cfaa28168a07ea4a53276b63068f94fce37d6aff Mon Sep 17 00:00:00 2001 From: Tim Kientzle <kientzle@acm.org> Date: Thu, 24 Mar 2022 10:35:00 +0100 Subject: [PATCH] ZIP reader: fix possible out-of-bounds read in zipx_lzma_alone_init() Fixes #1672 --- libarchive/archive_read_support_format_zip.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Index: libarchive-3.4.2/libarchive/archive_read_support_format_zip.c =================================================================== --- libarchive-3.4.2.orig/libarchive/archive_read_support_format_zip.c +++ libarchive-3.4.2/libarchive/archive_read_support_format_zip.c @@ -1596,7 +1596,7 @@ zipx_lzma_alone_init(struct archive_read */ /* Read magic1,magic2,lzma_params from the ZIPX stream. */ - if((p = __archive_read_ahead(a, 9, NULL)) == NULL) { + if(zip->entry_bytes_remaining < 9 || (p = __archive_read_ahead(a, 9, NULL)) == NULL) { archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT, "Truncated lzma data"); return (ARCHIVE_FATAL);
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor