Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Maintenance:8400
mercurial.openSUSE_Leap_42.3_Update
hg-mpatch-fix08.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File hg-mpatch-fix08.patch of Package mercurial.openSUSE_Leap_42.3_Update
# HG changeset patch # User Augie Fackler <augie@google.com> # Date 1525141386 14400 # Node ID 59837a16896da36d26e795881f4ba4454cb8ae41 # Parent 7f22ef3c0ee721da8a568613dff48a7051fad8d7 mpatch: avoid integer overflow in mpatch_decode (SEC) --- mercurial/mpatch.c | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) --- a/mercurial/mpatch.c +++ b/mercurial/mpatch.c @@ -286,10 +286,15 @@ int mpatch_decode(const char *bin, ssize lt->start = getbe32(bin + pos); lt->end = getbe32(bin + pos + 4); lt->len = getbe32(bin + pos + 8); - lt->data = bin + pos + 12; - pos += 12 + lt->len; - if (lt->start > lt->end || lt->len < 0) + if (lt->start < 0 || lt->start > lt->end || lt->len < 0) break; /* sanity check */ + if (!safeadd(12, &pos)) { + break; + } + lt->data = bin + pos; + if (!safeadd(lt->len, &pos)) { + break; + } lt++; }
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
