ffd556f407
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
26 lines
804 B
Diff
26 lines
804 B
Diff
From 0e1dadb05c1473b9df2d7b8f298dab801778ef99 Mon Sep 17 00:00:00 2001
|
|
From: jmoellers <josef.moellers@suse.com>
|
|
Date: Fri, 7 Sep 2018 13:55:35 +0200
|
|
Subject: [PATCH] One more free() to avoid memory leak.
|
|
|
|
[Retrieved from:
|
|
https://github.com/gdraheim/zziplib/commit/0e1dadb05c1473b9df2d7b8f298dab801778ef99]
|
|
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
|
|
---
|
|
zzip/zip.c | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/zzip/zip.c b/zzip/zip.c
|
|
index 51a1a4d..bc6c080 100644
|
|
--- a/zzip/zip.c
|
|
+++ b/zzip/zip.c
|
|
@@ -589,6 +589,8 @@ __zzip_parse_root_directory(int fd,
|
|
free(hdr0);
|
|
}
|
|
} /* else zero (sane) entries */
|
|
+ else
|
|
+ free(hdr0);
|
|
# ifndef ZZIP_ALLOW_MODULO_ENTRIES
|
|
return (entries != zz_entries) ? ZZIP_CORRUPTED : 0;
|
|
# else
|