From: Kaif Khan <kaif@bugqore.com>
Date: Tue, 23 Jun 2026 17:46:44 +0000 (+0530)
Subject: xar: fix OOB read decoding odd-length base64 in strappend_base64
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d78dda03049659947bbabf02cd59b65c643df156;p=thirdparty%2Flibarchive.git

xar: fix OOB read decoding odd-length base64 in strappend_base64
---

diff --git a/libarchive/archive_read_support_format_xar.c b/libarchive/archive_read_support_format_xar.c
index e61ca0e64..0254dffe2 100644
--- a/libarchive/archive_read_support_format_xar.c
+++ b/libarchive/archive_read_support_format_xar.c
@@ -2631,7 +2631,7 @@ strappend_base64(struct xar *xar,
 	len = 0;
 	out = buff;
 	b = (const unsigned char *)s;
-	while (l > 0) {
+	while (l > 1) {
 		int n = 0;
 
 		if (base64[b[0]] < 0 || base64[b[1]] < 0)