Issue causes a crash with specially crafted bzip2 files. More info: https://nvd.nist.gov/vuln/detail/CVE-2016-3189 Taken from Fedora. Signed-off-by: Rosen Penev <rosenp@gmail.com>
		
			
				
	
	
		
			12 lines
		
	
	
		
			468 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
			
		
		
	
	
			12 lines
		
	
	
		
			468 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
diff -up ./bzip2recover.c.old ./bzip2recover.c
 | 
						|
--- ./bzip2recover.c.old	2016-03-22 08:49:38.855620000 +0100
 | 
						|
+++ ./bzip2recover.c	2016-03-30 10:22:27.341430099 +0200
 | 
						|
@@ -457,6 +457,7 @@ Int32 main ( Int32 argc, Char** argv )
 | 
						|
             bsPutUChar ( bsWr, 0x50 ); bsPutUChar ( bsWr, 0x90 );
 | 
						|
             bsPutUInt32 ( bsWr, blockCRC );
 | 
						|
             bsClose ( bsWr );
 | 
						|
+            outFile = NULL;
 | 
						|
          }
 | 
						|
          if (wrBlock >= rbCtr) break;
 | 
						|
          wrBlock++;
 |