Don't allow sparse mapping entry to pass beyond 63bit.

Reported-By:    OSS-Fuzz issue 1627

diff --git a/libarchive/archive_read_support_format_tar.c b/libarchive/archive_read_support_format_tar.c
index 30d5bc83c3213612ae00fc899a5caf1a9ea40c87..c3b1ecb66052188749fa54377977bab3471461f7 100644 (file)
--- a/libarchive/archive_read_support_format_tar.c
+++ b/libarchive/archive_read_support_format_tar.c
@@ -2241,7 +2241,7 @@ gnu_add_sparse_entry(struct archive_read *a, struct tar *tar,
        else
                tar->sparse_list = p;
        tar->sparse_last = p;
-       if (remaining < 0 || offset < 0) {
+       if (remaining < 0 || offset < 0 || offset > INT64_MAX - remaining) {
                archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC, "Malformed sparse map data");
                return (ARCHIVE_FATAL);
        }