]> git.ipfire.org Git - thirdparty/libarchive.git/commit
RAR reader: fix use after free
authorMartin Matuska <martin@matuska.org>
Sat, 11 May 2019 00:36:53 +0000 (02:36 +0200)
committerMartin Matuska <martin@matuska.org>
Sat, 11 May 2019 00:36:53 +0000 (02:36 +0200)
commitb8592ecba2f9e451e1f5cb7ab6dcee8b8e7b3f60
tree0ed2b40b033a3ed4691db91c13cd1bae50519d24
parent313fa21fd3d2a540958b2f6aa186c6dd2e261c9b
RAR reader: fix use after free

If read_data_compressed() returns ARCHIVE_FAILED, the caller is allowed
to continue with next archive headers. We need to set rar->start_new_table
after the ppmd7_context got freed, otherwise it won't be allocated again.

Reported by: OSS-Fuzz issue 2582
libarchive/archive_read_support_format_rar.c