Closed
Description
Original issue 408 created by Google Code user hanno@hboeck.de on 2015-02-10T08:14:31.000Z:
Attached malformed mtree file causes a invalid memory read access in bsdtar. Found with american fuzzy lop.
READ of size 3 at 0x60600000eede thread T0
#0 0x57f892 in memmove /usr/include/bits/string3.h:57
#1 0x57f892 in readline libarchive/archive_read_support_format_mtree.c:1976
#2 0x57f892 in read_mtree libarchive/archive_read_support_format_mtree.c:964
#3 0x57f892 in read_header libarchive/archive_read_support_format_mtree.c:1034
#4 0x46cb6c in _archive_read_next_header2 libarchive/archive_read.c:645
#5 0x46cb6c in _archive_read_next_header libarchive/archive_read.c:685
#6 0x41bf76 in read_archive tar/read.c:252
#7 0x41e09b in tar_mode_x tar/read.c:104
#8 0x40d433 in main tar/bsdtar.c:805
#9 0x7fc9bdd2ff9f in __libc_start_main (/lib64/libc.so.6+0x1ff9f)
#10 0x412d31 (/mnt/ram/libarchive/bsdtar+0x412d31)
See attachment: read_mtree.mtree
See attachment: read_mtree.mtree.asan.txt