From 33ffcd02a512d141ece4530006a9a87d31c9a0ea Mon Sep 17 00:00:00 2001 From: Rex Dieter Date: Mon, 23 Mar 2015 11:35:20 -0500 Subject: [PATCH] fix patch --- libzip-0.11.2-CVE-2015-2331.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libzip-0.11.2-CVE-2015-2331.patch b/libzip-0.11.2-CVE-2015-2331.patch index 44aeb5a..67d2abc 100644 --- a/libzip-0.11.2-CVE-2015-2331.patch +++ b/libzip-0.11.2-CVE-2015-2331.patch @@ -6,7 +6,7 @@ diff -up libzip-0.11.2/lib/zip_dirent.c.CVE-2015-2331 libzip-0.11.2/lib/zip_dire if (nentry == 0) cd->entry = NULL; - else if ((cd->entry=(struct zip_entry *)malloc(sizeof(*(cd->entry))*(size_t)nentry)) == NULL) { -+ else if ((nentry > SIZE_MAX/sizeof(*(cd->entry))) || (cd->entry=(zip_entry_t *)malloc(sizeof(*(cd->entry))*(size_t)nentry)) == NULL) { ++ else if ((nentry > SIZE_MAX/sizeof(*(cd->entry))) || (cd->entry=(struct zip_entry *)malloc(sizeof(*(cd->entry))*(size_t)nentry)) == NULL) { _zip_error_set(error, ZIP_ER_MEMORY, 0); free(cd); return NULL;