ckolivas/lrzip
1
0
Fork 0
mirror of https://github.com/ckolivas/lrzip.git synced 2026-01-31 12:34:14 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add sanity checking on chunk data on decompression.

Browse source
This commit is contained in:
Con Kolivas 2018-05-16 16:51:03 +10:00
parent 33a6bf6234
commit 89d7b33e6a
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
stream.c
View file

@ -1116,6 +1116,10 @@ void *open_stream_in(rzip_control *control, int f, int n, char chunk_bytes)
sinfo->size = le64toh(sinfo->size);
print_maxverbose("Chunk size: %lld\n", sinfo->size);
control->st_size += sinfo->size;
if (unlikely(sinfo->chunk_bytes < 1 || sinfo->chunk_bytes > 8 || sinfo->size < 0)) {
print_err("Invalid chunk data size %d bytes %lld\n", sinfo->size, sinfo->chunk_bytes);
goto failed;
}
}
}
sinfo->initial_pos = get_readseek(control, f);