4e76995571
fixes for CVE-2017-5974, CVE-2017-5975, CVE-2017-5976, CVE-2017-5978, CVE-2017-5979, CVE-2017-5980 and CVE-2017-5981. Patches from SuSe via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854727#35
14 lines
549 B
Diff
14 lines
549 B
Diff
Index: zziplib-0.13.62/zzip/fseeko.c
|
|
===================================================================
|
|
--- zzip/fseeko.c
|
|
+++ zzip/fseeko.c
|
|
@@ -255,7 +255,7 @@ zzip_entry_findfirst(FILE * disk)
|
|
return 0;
|
|
/* we read out chunks of 8 KiB in the hope to match disk granularity */
|
|
___ zzip_off_t pagesize = PAGESIZE; /* getpagesize() */
|
|
- ___ ZZIP_ENTRY *entry = malloc(sizeof(*entry));
|
|
+ ___ ZZIP_ENTRY *entry = calloc(1, sizeof(*entry));
|
|
if (! entry)
|
|
return 0;
|
|
___ unsigned char *buffer = malloc(pagesize);
|