File CVE-2025-1864.patch of Package radare2

commit db6decd4bc90bb4a492129e70803136fa184f470
Author: tabudz <64760144+tabudz@users.noreply.github.com>
Date:   Thu Feb 20 00:33:15 2025 +0800

    Fix memory corruption in libmagic - CVE-2015-8865 ##crash
    
    * When the continuation level jumps by more than 20 in a single step

diff --git a/libr/magic/funcs.c b/libr/magic/funcs.c
index 7356dc0c93..52e3819f0e 100644
--- a/libr/magic/funcs.c
+++ b/libr/magic/funcs.c
@@ -322,7 +322,8 @@ const char *__magic_file_getbuffer(RMagic *ms) {
 
 int __magic_file_check_mem(RMagic *ms, unsigned int level) {
 	if (level >= ms->c.len) {
-		size_t len = (ms->c.len += 20) * sizeof (*ms->c.li);
+		ms->c.len = level + 20;
+		size_t len = ms->c.len * sizeof (*ms->c.li);
 		ms->c.li = (!ms->c.li) ? malloc (len) :
 		    realloc (ms->c.li, len);
 		if (!ms->c.li) {