bzip2recover-CVE-2016-3189.patch 681 B

1234567891011121314151617
  1. Author: Jakub Martisko <jamartis@redhat.com>
  2. Date: Wed, 30 Mar 2016 10:22:27 +0200
  3. Description: bzip2recover: Fix potential use-after-free
  4. Origin: https://bugzilla.redhat.com/attachment.cgi?id=1169843&action=edit
  5. Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2016-3189
  6. Bug-Debian: https://bugs.debian.org/827744
  7. --- a/bzip2recover.c
  8. +++ b/bzip2recover.c
  9. @@ -472,6 +472,7 @@ Int32 main ( Int32 argc, Char** argv )
  10. bsPutUChar ( bsWr, 0x50 ); bsPutUChar ( bsWr, 0x90 );
  11. bsPutUInt32 ( bsWr, blockCRC );
  12. bsClose ( bsWr );
  13. + outFile = NULL;
  14. }
  15. if (wrBlock >= rbCtr) break;
  16. wrBlock++;