]> git.ipfire.org Git - thirdparty/libarchive.git/commit
projects / thirdparty / libarchive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8dee29d) | patch
RAR reader: extend fix user after free
authorMartin Matuska <martin@matuska.org>
Sat, 15 Jun 2019 20:32:35 +0000 (22:32 +0200)
committerMartin Matuska <martin@matuska.org>
Sat, 15 Jun 2019 20:35:08 +0000 (22:35 +0200)
commitcb76165ac5b091545c32d26483b0c0d7a2c47e4f
tree72cb8da7941d6cfcd86dd5085aa7dbaa6443de3etree
parent8dee29db3ec1054ff571d7559a115003ac8854b3commit | diff
RAR reader: extend fix user after free

If read_data_compressed() returns ARCHIVE_FAILED, the caller is allowed
to continue with next archive headers. In addition to
rar->start_new_table=1 we need to set rar->ppmd_valid=0.

Reported by: OSS-Fuzz issue 15120
Makefile.am diff | blob | blame | history
libarchive/archive_read_support_format_rar.c diff | blob | blame | history
libarchive/test/test_read_format_rar.c diff | blob | blame | history
libarchive/test/test_read_format_rar_ppmd_use_after_free2.rar.uu [new file with mode: 0644] blob
Mirror of https://github.com/libarchive/libarchive.git