rpms/file
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix use-after-free with large file -f list (#2110622)

Browse Source
This commit is contained in:
Florian Weimer 2022-07-26 15:45:39 +02:00
parent 3c76982103
commit 64e7e54de2
2 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
file-rh2110622.patch Normal file
View File

@ -0,0 +1,14 @@
Fix use-after-free with large file -f list
diff --git a/src/file.c b/src/file.c
index bb058ce1e0082e95..a41018fc1670373c 100644
--- a/src/file.c
+++ b/src/file.c
@@ -529,6 +529,7 @@ out: file_err(EXIT_FAILURE, "Cannot allocate memory for file list");
char **nf = realloc(flist, fimax * sizeof(*flist));
if (nf == NULL)
goto out;
+ flist = nf;
}
flist[fi++] = line;
cwid = file_mbswidth(ms, line);

6
file.spec
View File

@ -15,7 +15,7 @@
Summary: Utility for determining file types
Name: file
Version: 5.42
Release: 3%{?dist}
Release: 4%{?dist}
License: BSD
Source0: http://ftp.astron.com/pub/file/file-%{version}.tar.gz
Source1: http://ftp.astron.com/pub/file/file-%{version}.tar.gz.asc
@ -31,6 +31,7 @@ Patch2: file-5.04-volume_key.patch
# Upstream commit: https://github.com/file/file/commit/19bf47777d0002ee884467e45e6ace702e40a4c1
Patch3: file-5.42-fix-stdin-input.patch
Patch4: file-rh2110622.patch
URL: https://www.darwinsys.com/file/
Requires: file-libs%{?_isa} = %{version}-%{release}
@ -216,6 +217,9 @@ make -C tests check
%endif
%changelog
* Tue Jul 26 2022 Florian Weimer <fweimer@redhat.com> - 5.42-4
- Fix use-after-free with large file -f list (#2110622)
* Mon Jul 25 2022 Vincent Mihalkovic <vmihalko@redhat.com> - 5.42-3
- bump release to 5.42-3