Samuel Sapalski f25d254dfd decompress_gunzip: Fix DoS if gzip is corrupt
On certain corrupt gzip files, huft_build will set the error bit on
the result pointer. If afterwards abort_unzip is called huft_free
might run into a segmentation fault or an invalid pointer to
free(p).

In order to mitigate this, we check in huft_free if the error bit
is set and clear it before the linked list is freed.

Signed-off-by: Samuel Sapalski <samuel.sapalski@nokia.com>
Signed-off-by: Peter Kaestle <peter.kaestle@nokia.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
2021-03-12 10:45:10 +01:00
..
2020-12-18 04:12:51 +01:00
2020-12-18 04:12:51 +01:00
2020-12-13 19:04:19 +01:00
2020-12-18 04:12:51 +01:00
2020-12-18 04:12:51 +01:00
2019-09-06 17:59:45 +02:00
2015-10-16 17:24:46 +02:00
2020-12-08 16:46:41 +01:00
2020-04-29 14:37:21 +02:00