rpms
/
zlib
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix covscan issue CWE-681 

Related: #2166501
This commit is contained in:
Lukas Javorsky 2023-02-09 08:14:26 +00:00
parent 9e9b99af9c
commit 2783e8aa9f
2 changed files with 4 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
zlib-1.2.11-covscan-issues.patch
View File

@ -23,29 +23,3 @@ index 089285a..9b09718 100644
bstate = DEFLATE_HOOK(strm, flush, &bstate) ? bstate :
s->level == 0 ? deflate_stored(s, flush) :
--- zlib-1.2.11/test/crc32_test.c.old 2023-02-07 22:27:07.759829524 +0000
+++ zlib-1.2.11/test/crc32_test.c 2023-02-07 22:28:03.729829524 +0000
@@ -11,7 +11,7 @@
# include <stdlib.h>
#endif
-void test_crc32 OF((uLong crc, Byte* buf, z_size_t len, uLong chk, int line));
+void test_crc32 OF((uLong crc, char* buf, z_size_t len, uLong chk, int line));
int main OF((void));
typedef struct {
@@ -24,12 +24,12 @@ typedef struct {
void test_crc32(crc, buf, len, chk, line)
uLong crc;
- Byte *buf;
+ char *buf;
z_size_t len;
uLong chk;
int line;
{
- uLong res = crc32(crc, buf, len);
+ uLong res = crc32(crc, (Bytef *) buf, len);
if (res != chk) {
fprintf(stderr, "FAIL [%d]: crc32 returned 0x%08X expected 0x%08X\n",
line, (unsigned int)res, (unsigned int)chk);

5
zlib.spec
View File

@ -2,7 +2,7 @@
Name: zlib
Version: 1.2.11
Release: 38%{?dist}
Release: 39%{?dist}
Summary: Compression and decompression library
# /contrib/dotzlib/ have Boost license
License: zlib and Boost
@ -213,6 +213,9 @@ find $RPM_BUILD_ROOT -name '*.la' -delete
%changelog
* Thu Feb 09 2023 Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-39
- Fix covscan issue CWE-681
* Tue Feb 07 2023 Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-38
- Resolve fuzzing issue for unknown memory access