rsync/rsync-3.2.5-cve-2024-12085.patch
Michal Ruprich 803ba84686 Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
Resolves: RHEL-70208 - Path traversal vulnerability in rsync
Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links
2025-01-30 10:01:16 +01:00

15 lines
395 B
Diff

diff --git a/match.c b/match.c
index 36e78ed..dfd6af2 100644
--- a/match.c
+++ b/match.c
@@ -147,6 +147,9 @@ static void hash_search(int f,struct sum_struct *s,
int more;
schar *map;
+ // prevent possible memory leaks
+ memset(sum2, 0, sizeof sum2);
+
/* want_i is used to encourage adjacent matches, allowing the RLL
* coding of the output to work more efficiently. */
want_i = 0;