emo/busybox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

dpkg: fix buffer overflow (bug 983)

Browse Source
This commit is contained in:
Denis Vlasenko 2006-09-03 16:33:58 +00:00
parent 21afc7dc29
commit 1da6a21666
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
archival/dpkg.c
View File

@ -1522,6 +1522,7 @@ static void unpack_package(deb_file_t *deb_file)
const unsigned int status_num = search_status_hashtable(package_name); const unsigned int status_num = search_status_hashtable(package_name);
const unsigned int status_package_num = status_hashtable[status_num]->package; const unsigned int status_package_num = status_hashtable[status_num]->package;
char *info_prefix; char *info_prefix;
char *list_filename;
archive_handle_t *archive_handle; archive_handle_t *archive_handle;
FILE *out_stream; FILE *out_stream;
llist_t *accept_list = NULL; llist_t *accept_list = NULL;
@ -1570,8 +1571,8 @@ static void unpack_package(deb_file_t *deb_file)
unpack_ar_archive(archive_handle); unpack_ar_archive(archive_handle);
/* Create the list file */ /* Create the list file */
strcat(info_prefix, "list"); list_filename = bb_xasprintf("/var/lib/dpkg/info/%s.list", package_name);
out_stream = xfopen(info_prefix, "w"); out_stream = bb_xfopen(list_filename, "w");
while (archive_handle->sub_archive->passed) { while (archive_handle->sub_archive->passed) {
/* the leading . has been stripped by data_extract_all_prefix already */ /* the leading . has been stripped by data_extract_all_prefix already */
fputs(archive_handle->sub_archive->passed->data, out_stream); fputs(archive_handle->sub_archive->passed->data, out_stream);
@ -1585,6 +1586,7 @@ static void unpack_package(deb_file_t *deb_file)
set_status(status_num, "unpacked", 3); set_status(status_num, "unpacked", 3);
free(info_prefix); free(info_prefix);
free(list_filename);
} }
static void configure_package(deb_file_t *deb_file) static void configure_package(deb_file_t *deb_file)