Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LibArchive: Make bounds checks stricter in the Zip parser #5977

Merged
merged 1 commit into from Mar 27, 2021

Conversation

IdanHo
Copy link
Member

@IdanHo IdanHo commented Mar 27, 2021

We now also check we have enough space in the incoming buffer for the various signatures and optional (length specified) fields. This helps prevents a possible heap overflow read. (This fixes #5975)

We now also check we have enough space in the incoming buffer for the
various signatures and optional (length specified) fields. This helps
prevents a possible heap overflow read.
@awesomekling awesomekling merged commit 4317db7 into SerenityOS:master Mar 27, 2021
6 checks passed
@IdanHo IdanHo deleted the fix_5975 branch March 27, 2021 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

LibArchive: Buffer overflow in EndOfCentralDirectory::read
2 participants