f25d254dfd
On certain corrupt gzip files, huft_build will set the error bit on the result pointer. If afterwards abort_unzip is called huft_free might run into a segmentation fault or an invalid pointer to free(p). In order to mitigate this, we check in huft_free if the error bit is set and clear it before the linked list is freed. Signed-off-by: Samuel Sapalski <samuel.sapalski@nokia.com> Signed-off-by: Peter Kaestle <peter.kaestle@nokia.com> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> |
||
---|---|---|
.. | ||
libarchive | ||
ar.c | ||
bbunzip_test2.sh | ||
bbunzip_test3.sh | ||
bbunzip_test.sh | ||
bbunzip.c | ||
bzip2.c | ||
Config.src | ||
cpio.c | ||
dpkg_deb.c | ||
dpkg.c | ||
gzip.c | ||
Kbuild.src | ||
lzop.c | ||
rpm.c | ||
rpm.h | ||
tar_symlink_attack | ||
tar.c | ||
unzip.c |