bb11946 - check that tar checksum is within bounds. Patch supplied by…

… Suleman Ali.
Cisco-Talos · Oct 27, 2017 · 292d687 · 292d687
1 parent 7732667
commit 292d687
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/libclamav/untar.c b/libclamav/untar.c
@@ -182,6 +182,9 @@ cli_untar(const char *dir, unsigned int posix, cli_ctx *ctx)
 			if((ret=cli_checklimits("cli_untar", ctx, 0, 0, 0))!=CL_CLEAN)
 				return ret;
 
+                        if (nread < TARCHECKSUMOFFSET + TARCHECKSUMLEN)
+                            return ret;
+
 			checksum = getchecksum(block);
 			cli_dbgmsg("cli_untar: Candidate checksum = %d, [%o in octal]\n", checksum, checksum);
 			if(testchecksum(block, checksum) != 0) {