ckolivas/lrzip
1
0
Fork 0
mirror of https://github.com/ckolivas/lrzip.git synced 2026-01-19 14:50:18 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Prevent infinite loop from crafted/corrupt archive in unzip_match.

Browse source
This commit is contained in:
Con Kolivas 2018-05-16 19:26:15 +10:00
parent b84c710902
commit 50cfb3b9f6
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
runzip.c
View file

@ -219,6 +219,8 @@ static i64 unzip_match(rzip_control *control, void *ss, i64 len, uint32 *cksum,
while (len) {
n = MIN(len, offset);
if (unlikely(n < 1))
fatal_return(("Failed fd history in unzip_match due to corrupt archive\n"), -1);
if (unlikely(read_fdhist(control, off_buf, (size_t)n) != (ssize_t)n)) {
dealloc(buf);