]> git.ipfire.org Git - thirdparty/libarchive.git/commit
RAR5 reader: fixed out of bounds read in some files 1492/head
authorGrzegorz Antoniak <ga@anadoxin.org>
Sat, 13 Feb 2021 08:08:13 +0000 (09:08 +0100)
committerGrzegorz Antoniak <ga@anadoxin.org>
Sun, 9 Jan 2022 18:49:56 +0000 (19:49 +0100)
commit05ebb55896d10a9737dad9ae0303f7f45489ba6f
treede68e4d05c9153feaf570a9154e883070c3cc285
parent7ef089ec204a279ef87ebd19fbedef42ec418d05
RAR5 reader: fixed out of bounds read in some files

Added more range checks in the bit stream reading functions
(read_bits_16 and read_bits_32) in order to better guard against out of
memory reads.

This commit contains a test with OSSFuzz sample #30448.
Makefile.am
libarchive/archive_read_support_format_rar5.c
libarchive/test/test_read_format_rar5.c
libarchive/test/test_read_format_rar5_decode_number_out_of_bounds_read.rar.uu [new file with mode: 0644]