]> git.ipfire.org Git - thirdparty/libarchive.git/commit
xar: Fix OOB accesses with fflags 3041/head
authorTobias Stoeckmann <tobias@stoeckmann.org>
Sat, 16 May 2026 19:21:36 +0000 (21:21 +0200)
committerTobias Stoeckmann <tobias@stoeckmann.org>
Sat, 16 May 2026 19:50:01 +0000 (21:50 +0200)
commit583b5e4d2f9a7f169dd2c47472ebab484bd5ecb4
tree164fe422a576f40a9256acb70d864b02941454fe
parentb55059597b7b91e3d49b23e02044a6992c840586
xar: Fix OOB accesses with fflags

If multiple fflags are added to archive, a stack out of boundary is
triggered due to insufficient array allocation.

Also, if flags with long names are supplied, an out of boundary read can
occur.

Resolves GHSA-wfvr-54j8-47r9.

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
libarchive/archive_write_set_format_xar.c