]> git.ipfire.org Git - thirdparty/zlib-ng.git/commit
Zlib patch: prevent uninitialized use of state->check
authorSebastian Pop <s.pop@samsung.com>
Wed, 12 Dec 2018 15:35:43 +0000 (09:35 -0600)
committerHans Kristian Rosbach <hk-github@circlestorm.org>
Thu, 13 Dec 2018 08:08:35 +0000 (09:08 +0100)
commitd3714a7bd0b5440a42d91006fc3cbe773174b368
tree4c85717b74570fc3eb45c26b7a4169615606c160
parent13619fd2b6d0d5e2c2b5d8e8c08bc97097415c11
Zlib patch: prevent uninitialized use of state->check

This CL fixes a security bug in zlib. It was reported upstream long ago
and the testcase was shared upstream but it's yet unsolved. As a fix,
state->check is set to the same value as the adler32 of an empty string.

Upstream bug: madler/zlib#245

Bug: chromium:697481 https://crbug.com/697481
Reviewed-on: https://chromium-review.googlesource.com/601193
Reviewed-by: Tom Sepez <tsepez@chromium.org>
Reviewed-by: Adam Langley <agl@chromium.org>
Commit-Queue: Nicolás Peña <npm@chromium.org>
inflate.c