From: sms
Subject: Fix CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
Bug-Debian: http://bugs.debian.org/773722

--- a/extract.c
+++ b/extract.c
@@ -2234,10 +2234,17 @@
     if (compr_offset < 4)                /* field is not compressed: */
         return PK_OK;                    /* do nothing and signal OK */
 
+    /* Return no/bad-data error status if any problem is found:
+     *    1. eb_size is too small to hold the uncompressed size
+     *       (eb_ucsize).  (Else extract eb_ucsize.)
+     *    2. eb_ucsize is zero (invalid).  2014-12-04 SMS.
+     *    3. eb_ucsize is positive, but eb_size is too small to hold
+     *       the compressed data header.
+     */
     if ((eb_size < (EB_UCSIZE_P + 4)) ||
-        ((eb_ucsize = makelong(eb+(EB_HEADSIZE+EB_UCSIZE_P))) > 0L &&
-         eb_size <= (compr_offset + EB_CMPRHEADLEN)))
-        return IZ_EF_TRUNC;               /* no compressed data! */
+     ((eb_ucsize = makelong( eb+ (EB_HEADSIZE+ EB_UCSIZE_P))) == 0L) ||
+     ((eb_ucsize > 0L) && (eb_size <= (compr_offset + EB_CMPRHEADLEN))))
+        return IZ_EF_TRUNC;             /* no/bad compressed data! */
 
     if (
 #ifdef INT_16BIT
/etc/teams.scm'>log</a><a href='/guix/tree/etc/teams.scm?id=4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787'>tree</a><a href='/guix/commit/etc/teams.scm?id=4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787'>commit</a><a href='/guix/diff/etc/teams.scm?id=4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/etc/teams.scm'>
<input type='hidden' name='id' value='4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787'>root</a>/<a href='/guix/log/etc?id=4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787'>etc</a>/<a href='/guix/log/etc/teams.scm?id=4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787'>teams.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/etc/teams.scm?id=4a1b3830a8ff6b05ad9a2b27c8a2cdbd00a45787&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-12-22 00:06:25 +0100'>2023-12-22</span></td><td><a href='/guix/commit/etc/teams.scm?id=4771960e5d559d2f3911fd24fd648fa5e97bdf39'>teams: mozilla: Add icecat-extension.scm and browser-extensions.scm.</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/teams.scm (mozilla): Add "gnu/build/icecat-extension.scm" and
"gnu/packages/browser-extensions.scm".

Change-Id: Id59fb307256e5870b3c19f0b7c41446775a57d9e
</span></span></td><td>Clément Lassieur</td></tr>
<tr><td><span title='2023-12-20 17:47:03 +0100'>2023-12-20</span></td><td><a href='/guix/commit/etc/teams.scm?id=aa22cdd363d3b2cf64586ccee918531aa53ef365'>teams: Add entry for Clément Lassieur.</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/teams.scm ("Clément Lassieur"): New member.

Change-Id: If6456d9496f59b0a26608ad5e55aa8fdfb8af492
</span></span></td><td>Clément Lassieur</td></tr>
<tr><td><span title='2023-11-20 14:56:31 +0000'>2023-11-20</span></td><td><a href='/guix/commit/etc/teams.scm?id=436bbc90fcc6eb300684117aeb286cf6404beb57'>teams: Include golang-check.scm in the go team.</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/teams.scm (go): Add gnu/packages/golang-check.scm to scope.

Change-Id: Ifc90eb0c3fc5d716b605e7e3e100a38431498a2c
Signed-off-by: Christopher Baines &lt;mail@cbaines.net&gt;
</span></span></td><td>Benjamin</td></tr>
<tr><td><span title='2023-11-12 16:37:09 +0200'>2023-11-12</span></td><td><a href='/guix/commit/etc/teams.scm?id=1a775399879fcc7c06444f9117630329f1cb6365'>teams: Add Ekaitz Zarraga to bootstrap and zig.</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/teams.scm: Add Ekaitz Zarraga.

Change-Id: Idda2ffbc15adc3725bcd1600988582f0d4c2766a
Signed-off-by: Efraim Flashner &lt;efraim@flashner.co.il&gt;
</span></span></td><td>Ekaitz Zarraga</td></tr>
<tr><td><span title='2023-11-12 16:37:09 +0200'>2023-11-12</span></td><td><a href='/guix/commit/etc/teams.scm?id=25ac7e893c74d46ca50bd02301f02baaa503f4cb'>teams: Add Zig team.</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/teams.scm (zig): New team for the zig programming language,
packages and build system.

Change-Id: I96f9ced1ad04b1cd9041c53aa8c86fe29014ccd1
Signed-off-by: Efraim Flashner &lt;efraim@flashner.co.il&gt;
</span></span></td><td>Ekaitz Zarraga</td></tr>
<tr><td><span title='2023-11-01 12:24:29 -0400'>2023-11-01</span></td><td><a href='/guix/commit/etc/teams.scm?id=a96f1c1bc0fa186414359890025e8acacbb1de02'>teams.scm: Add file-local variable prop line for the mode.</a><span class='msg-avail'>...<span class='msg-tooltip'>This tells Emacs to use the scheme-mode to edit the file.

* etc/teams.scm (mode): New file-local variable.

Change-Id: I9a48f552e831317402673d95cf6c1de506d388b5
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2023-10-27 12:13:09 +0200'>2023-10-27</span></td><td><a href='/guix/commit/etc/teams.scm?id=92913703448c8e1a488ab066f60741262cdbf923'>teams: Add myself to audio team.</a><span class='msg-avail'>...<span class='msg-tooltip'>Message-ID: &lt;cfad42ecdcd190893699ef28d42b35b706729bcd.1698355699.git.gabriel@erlikon.ch&gt;
In-Reply-To: &lt;81d0877b2cb39164563dfbf2c551f1c99aad75ed.1698355699.git.gabriel@erlikon.ch&gt;
References: &lt;81d0877b2cb39164563dfbf2c551f1c99aad75ed.1698355699.git.gabriel@erlikon.ch&gt;
From: Gabriel Wicki &lt;gabriel@erlikon.ch&gt;
Date: Tue, 2 May 2023 16:47:41 +0200
Subject: [PATCH 2/2] teams: Add Gabriel Wicki.

* etc/teams.scm.in ("Gabriel Wicki"): New member.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Gabriel Wicki</td></tr>
<tr><td><span title='2023-10-27 12:13:09 +0200'>2023-10-27</span></td><td><a href='/guix/commit/etc/teams.scm?id=e7c8bdac93df97242820fe5490d92eee3b019fd7'>teams: Add audio team.</a><span class='msg-avail'>...<span class='msg-tooltip'>Message-ID: &lt;81d0877b2cb39164563dfbf2c551f1c99aad75ed.1698355699.git.gabriel@erlikon.ch&gt;
From: Gabriel Wicki &lt;gabriel@erlikon.ch&gt;
Date: Tue, 2 May 2023 16:38:15 +0200
Subject: [PATCH 1/2] teams: Add audio team.

* etc/teams.scm.in (audio): Add team.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Gabriel Wicki</td></tr>
<tr><td><span title='2023-10-22 20:35:15 -0400'>2023-10-22</span></td><td><a href='/guix/commit/etc/teams.scm?id=4cf4dcb8b31274a8dfba6bae3a6826a1b521da3f'>teams: Adjust shebang to use 'guix repl'.</a><span class='msg-avail'>...<span class='msg-tooltip'>This ensures the correct Guix dependencies are always available for the
script.

* etc/teams.scm.in: Rename to...
* etc/teams.scm: ... this.  Adjust shebang.
* .gitignore: No longer ignore it.
* configure.ac: Do not process it with AC_CONFIG_FILES.

Reported-by: Clément Lassieur &lt;clement@lassieur.org&gt;
Fixes: https://issues.guix.gnu.org/66605
Change-Id: I7a01750c6c5f0696b6c36b1e6caa9389d9e6822c
</span></span></td><td>Maxim Cournoyer</td></tr>