When the initial archive open for write fails, explicitly free filters.

This provides a defense-in-depth against programming errors due to the
partial state. Based on a report from Airbus Security - Vulnerability
Management.

diff --git a/libarchive/archive_write.c b/libarchive/archive_write.c
index 9fa46bf5e3f841b9df62fccb3589f878b3334860..1c40e97697f0e03947b0bef06d5c9fe133ade4ca 100644 (file)
--- a/libarchive/archive_write.c
+++ b/libarchive/archive_write.c
@@ -486,6 +486,7 @@ archive_write_open(struct archive *_a, void *client_data,
        ret = __archive_write_open_filter(a->filter_first);
        if (ret < ARCHIVE_WARN) {
                r1 = __archive_write_close_filter(a);
+               __archive_write_filters_free(_a);
                return (r1 < ret ? r1 : ret);
        }