projects / gentoo.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 35618de) | patch
app-arch/bzip2: check for nselector's upperbound
authorAmin Hassani <ahassani@chromium.org>
Mon, 25 Mar 2019 18:25:34 +0000 (11:25 -0700)
committerThomas Deutschmann <whissi@gentoo.org>
Fri, 26 Apr 2019 08:34:55 +0000 (10:34 +0200)
commit1948811390283ff8e5f122bd9ec68f2e7b907450
treed782cdd6f2172a86457ae52593ad7b5855474e9etree | snapshot
parent35618dea47332897486db787b30d19e3980293d9commit | diff
app-arch/bzip2: check for nselector's upperbound

In bzip2 decompressor, the upper bound of nselectors have not been
checked and hence a bad payload can cause a segfault. This patch adds
that required upperbound check.

Signed-off-by: Amin Hassani <ahassani@chromium.org>
Closes: https://github.com/gentoo/gentoo/pull/11503
Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
app-arch/bzip2/bzip2-1.0.6-r11.ebuild [moved from app-arch/bzip2/bzip2-1.0.6-r10.ebuild with 98% similarity] diff | blob | history
app-arch/bzip2/files/bzip2-1.0.6-nselectors-upper-bound-check.patch [new file with mode: 0644] blob
Unnamed repository; edit this file 'description' to name the repository.