Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
invalid read in dataLength / grabData (header.c) #138
The attached file causes an invalid memory read access.
added a commit
Feb 3, 2017
The package is no longer readable after commit 3a07ba3 because there's a negative tag involved. However the actual crash here is due to RPMTAG_PREFIXES type mismatch (int32 in package, assumed string array) combined with lack of validation and error checking - rpm assumes tags are of correct type almost everywhere throughout the codebase. Sigh.