aboutsummaryrefslogtreecommitdiff
path: root/gnu/packages/patches/unzip-overflow.patch
blob: 228c28377ff9b3b4063324177aec3c5f473790c7 (about) (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
diff --git a/extract.c b/extract.c
index a0a4929..9ef80b3 100644
--- a/extract.c
+++ b/extract.c
@@ -2214,6 +2214,7 @@ static int test_compr_eb(__G__ eb, eb_size, compr_offset, test_uc_ebdata)
     ulg eb_ucsize;
     uch *eb_ucptr;
     int r;
+    ush method;
 
     if (compr_offset < 4)                /* field is not compressed: */
         return PK_OK;                    /* do nothing and signal OK */
@@ -2223,6 +2224,12 @@ static int test_compr_eb(__G__ eb, eb_size, compr_offset, test_uc_ebdata)
          eb_size <= (compr_offset + EB_CMPRHEADLEN)))
         return IZ_EF_TRUNC;               /* no compressed data! */
 
+    method = makeword(eb + (EB_HEADSIZE + compr_offset));
+    if ((method == STORED) && (eb_size != compr_offset + EB_CMPRHEADLEN + eb_ucsize))
+        return PK_ERR;            /* compressed & uncompressed
+                                   * should match in STORED
+                                   * method */
+
     if (
 #ifdef INT_16BIT
         (((ulg)(extent)eb_ucsize) != eb_ucsize) ||
-avail'>...Marius Bakke 2020-05-10gnu: herbstluftwm: Update to 0.8.2....Boris A. Dekshteyn 2020-05-09gnu: sway: Update to 1.4...Niclas Meyer 2020-05-09gnu: wlroots: Update to 0.10.1...Niclas Meyer 2020-04-30gnu: Add sbcl-stumpwm-pass....Marcin Karpezo 2020-04-27gnu: Add sbcl-stumpwm-swm-gaps....Oleg Pykhalov 2020-04-27gnu: herbstluftwm: Update to 0.8.1...Boris A. Dekshteyn 2020-04-26gnu: Add sbcl-stumpwm-globalwindows....Oleg Pykhalov 2020-03-30gnu: Add stumpish....Oleg Pykhalov 2020-03-30gnu: Add sbcl-stumpwm-ttf-fonts....Oleg Pykhalov 2020-03-29gnu: herbstluftwm: Put completions where fish expects them....Tobias Geerinckx-Rice 2020-03-29gnu: herbstluftwm: The ‘check’ phase already respects ‘#:tests?’....Tobias Geerinckx-Rice 2020-03-22gnu: i3-gaps: Update to 4.18....Alexandru-Sergiu Marton 2020-03-19gnu: waybar: Update to 0.9.1....Brendan Tildesley 2020-03-12gnu: xmobar: Update to 0.33....Tobias Geerinckx-Rice 2020-03-10gnu: xmobar: Use HTTPS home page....Tobias Geerinckx-Rice 2020-03-04gnu: i3-wm: Update to 4.18....Marius Bakke 2020-02-10gnu: sway: Remove unused input....Marius Bakke 2020-02-10gnu: swaylock: Remove unused input....Marius Bakke 2020-02-10gnu: swaybg: Remove unused input....Marius Bakke 2020-02-10gnu: polybar: Add comment about build specificity....Nicolas Goaziou 2020-02-10gnu: polybar: Install man page....Brice Waegeneire 2020-02-08gnu: awesome: Update to 4.3....Nicolas Goaziou 2020-02-08gnu: lua-lgi: Use current lua package....Nicolas Goaziou 2020-01-15gnu: menumaker: Update to 0.99.11....Tobias Geerinckx-Rice 2020-01-04gnu: polybar: Update to 3.4.2....Tobias Geerinckx-Rice 2019-12-26gnu: i3-gaps: Update source checksum....Marius Bakke 2019-12-24gnu: xmobar: Update to 0.32....Tobias Geerinckx-Rice 2019-12-23gnu: Add i3-gaps....Alexandru-Sergiu Marton 2019-12-19Update email for Brett Gilio....Brett Gilio 2019-12-09gnu: Add lemonbar....Noodles! 2019-12-08gnu: stumpwm: Update to 19.11....Evan Straw 2019-12-05gnu: Really move lisp libraries to lisp-xyz, uglify-js to javascript and stum......Pierre Neidhardt 2019-12-05Revert "gnu: Properly move lisp libraries to lisp-xyz, uglify-js to javascrip......Tobias Geerinckx-Rice 2019-12-05gnu: Properly move lisp libraries to lisp-xyz, uglify-js to javascript and st......Pierre Neidhardt 2019-11-28Revert "gnu: Move lisp libraries to lisp-xyz, uglify-js to javascript and stu......Ricardo Wurmus 2019-11-28gnu: Move lisp libraries to lisp-xyz, uglify-js to javascript and stumpwm to wm....Pierre Neidhardt 2019-11-20gnu: Update xmobar to 0.31....John Soo