rpms/bzip2
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fixes out of bounds access in BZ2_decompress

Browse Source 
Resolves: RHEL-64929
This commit is contained in:
Jacek Migacz 2024-10-29 12:14:08 +01:00
parent 3c01b57f11
commit f9ed8e44ad
2 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
bzip2.spec
View File

@ -3,7 +3,7 @@
Summary: A file compression utility Summary: A file compression utility
Name: bzip2 Name: bzip2
Version: 1.0.6 Version: 1.0.6
Release: 26%{?dist} Release: 27%{?dist}
License: BSD License: BSD
Group: Applications/File Group: Applications/File
URL: http://www.bzip.org/ URL: http://www.bzip.org/
@ -17,6 +17,7 @@ Patch2: bzip2-1.0.4-bzip2recover.patch
Patch3: bzip2-ldflags.patch Patch3: bzip2-ldflags.patch
# resolves: #1348179 # resolves: #1348179
Patch4: set-out-file-to-null.patch Patch4: set-out-file-to-null.patch
Patch5: decompress-out-of-bounds.patch
%description %description
Bzip2 is a freely available, patent-free, high quality data compressor. Bzip2 is a freely available, patent-free, high quality data compressor.
@ -62,6 +63,7 @@ Static libraries for applications using the bzip2 compression format.
%patch2 -p1 -b .bz2recover %patch2 -p1 -b .bz2recover
%patch3 -p1 -b .ldflags %patch3 -p1 -b .ldflags
%patch4 -p1 -b .bzip2recover %patch4 -p1 -b .bzip2recover
%patch5 -p1
cp -a %{SOURCE1} . cp -a %{SOURCE1} .
sed -i "s|^libdir=|libdir=%{_libdir}|" bzip2.pc sed -i "s|^libdir=|libdir=%{_libdir}|" bzip2.pc
@ -140,6 +142,9 @@ ln -s bzgrep.1 $RPM_BUILD_ROOT%{_mandir}/man1/bzfgrep.1
%{_libdir}/pkgconfig/bzip2.pc %{_libdir}/pkgconfig/bzip2.pc
%changelog %changelog
* Tue Oct 29 2024 Jacek Migacz <jmigacz@redhat.com> - 1.0.6-27
- Fixes out of bounds access in BZ2_decompress (RHEL-64929)
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.6-26 * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.6-26
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

13
decompress-out-of-bounds.patch Normal file
View File

@ -0,0 +1,13 @@
diff --git a/decompress.c b/decompress.c
index ab6a624db17a1c124b5be09c04b0e99d950b70ff..f3db91d14f6ed09f76fbd5c73f7db2cba5f577da 100644
--- a/decompress.c
+++ b/decompress.c
@@ -287,7 +287,7 @@ Int32 BZ2_decompress ( DState* s )
GET_BITS(BZ_X_SELECTOR_1, nGroups, 3);
if (nGroups < 2 || nGroups > 6) RETURN(BZ_DATA_ERROR);
GET_BITS(BZ_X_SELECTOR_2, nSelectors, 15);
- if (nSelectors < 1) RETURN(BZ_DATA_ERROR);
+ if (nSelectors < 1 || nSelectors > BZ_MAX_SELECTORS) RETURN(BZ_DATA_ERROR);
for (i = 0; i < nSelectors; i++) {
j = 0;
while (True) {