From: Илья <54144096+Commandoss@users.noreply.github.com>
Date: Fri, 31 Oct 2025 12:23:55 +0000 (+0300)
Subject: heap-use-after-free(read) at src/libarchive/archive_read_support_format_lha.c:692:6
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=212426e7513de45011fa720724939dba4b764d52;p=thirdparty%2Flibarchive.git

heap-use-after-free(read) at src/libarchive/archive_read_support_format_lha.c:692:6
---

diff --git a/libarchive/archive_read_support_format_lha.c b/libarchive/archive_read_support_format_lha.c
index 2a84ad9dd..abf8b8799 100644
--- a/libarchive/archive_read_support_format_lha.c
+++ b/libarchive/archive_read_support_format_lha.c
@@ -689,7 +689,7 @@ archive_read_format_lha_read_header(struct archive_read *a,
 	 * a pathname and a symlink has '\' character, a directory
 	 * separator in DOS/Windows. So we should convert it to '/'.
 	 */
-	if (p[H_LEVEL_OFFSET] == 0)
+	if (lha->level == 0)
 		lha_replace_path_separator(lha, entry);
 
 	archive_entry_set_mode(entry, lha->mode);