rsync/rsync-3.1.3-cve-2024-12085.patch
Michal Ruprich 3c55673deb Resolves: RHEL-70207 - Path traversal vulnerability in rsync
Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal
Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links
Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents
2025-02-03 12:54:22 +01:00

15 lines
395 B
Diff

diff --git a/match.c b/match.c
index 36e78ed..dfd6af2 100644
--- a/match.c
+++ b/match.c
@@ -147,6 +147,9 @@ static void hash_search(int f,struct sum_struct *s,
int more;
schar *map;
+ // prevent possible memory leaks
+ memset(sum2, 0, sizeof sum2);
+
/* want_i is used to encourage adjacent matches, allowing the RLL
* coding of the output to work more efficiently. */
want_i = 0;