summaryrefslogtreecommitdiff
path: root/gnu/usr.bin/perl
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2022-08-09 07:37:36 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2022-08-09 07:37:36 +0000
commita2e9e11b48eb0642aab19f54d54b21e3e006ec1c (patch)
treeada96266341eea2f18b51ced4c54095cd5930d6c /gnu/usr.bin/perl
parent4ad6bdfe37709a9c417cabc11d6372a7028a1e14 (diff)
Fix buffer overflow in inflateGetHeader()
This is the initial fix combined with a fix for a NULL deref introduced in the initial fix. ok millert, help from tj commit eff308af425b67093bab25f80f1ae950166bece1 Author: Mark Adler <fork@madler.net> Date: Sat Jul 30 15:51:11 2022 -0700 Fix a bug when getting a gzip header extra field with inflate(). If the extra field was larger than the space the user provided with inflateGetHeader(), and if multiple calls of inflate() delivered the extra header data, then there could be a buffer overflow of the provided space. This commit assures that provided space is not exceeded. https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1 commit 1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d (HEAD -> develop, origin/develop) Author: Mark Adler <fork@madler.net> Date: Mon Aug 8 10:50:09 2022 -0700 Fix extra field processing bug that dereferences NULL state->head. The recent commit to fix a gzip header extra field processing bug introduced the new bug fixed here. https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d
Diffstat (limited to 'gnu/usr.bin/perl')
0 files changed, 0 insertions, 0 deletions