f25d254dfd
On certain corrupt gzip files, huft_build will set the error bit on the result pointer. If afterwards abort_unzip is called huft_free might run into a segmentation fault or an invalid pointer to free(p). In order to mitigate this, we check in huft_free if the error bit is set and clear it before the linked list is freed. Signed-off-by: Samuel Sapalski <samuel.sapalski@nokia.com> Signed-off-by: Peter Kaestle <peter.kaestle@nokia.com> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> |
||
|---|---|---|
| .. | ||
| libarchive | ||
| ar.c | ||
| bbunzip_test2.sh | ||
| bbunzip_test3.sh | ||
| bbunzip_test.sh | ||
| bbunzip.c | ||
| bzip2.c | ||
| Config.src | ||
| cpio.c | ||
| dpkg_deb.c | ||
| dpkg.c | ||
| gzip.c | ||
| Kbuild.src | ||
| lzop.c | ||
| rpm.c | ||
| rpm.h | ||
| tar_symlink_attack | ||
| tar.c | ||
| unzip.c | ||