Djam/bzip2
1
0
Fork 0
mirror of https://abf.rosa.ru/djam/bzip2.git synced 2025-02-23 19:02:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix CVE-2016-3189

Browse source
This commit is contained in:
Denis Silakov 2017-01-29 11:08:36 +03:00
parent 0b78771cb2
commit 543ed69ca1
2 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
bzip2-1.0.6-CVE-2016-3189.patch Normal file
View file

@ -0,0 +1,11 @@
diff -up ./bzip2recover.c.old ./bzip2recover.c
--- ./bzip2recover.c.old 2016-03-22 08:49:38.855620000 +0100
+++ ./bzip2recover.c 2016-03-30 10:22:27.341430099 +0200
@@ -458,6 +458,7 @@ Int32 main ( Int32 argc, Char** argv )
bsPutUChar ( bsWr, 0x50 ); bsPutUChar ( bsWr, 0x90 );
bsPutUInt32 ( bsWr, blockCRC );
bsClose ( bsWr );
+ outFile = NULL;
}
if (wrBlock >= rbCtr) break;
wrBlock++;

4
bzip2.spec
View file

@ -7,7 +7,7 @@
Summary: Extremely powerful file compression utility Summary: Extremely powerful file compression utility
Name: bzip2 Name: bzip2
Version: 1.0.6 Version: 1.0.6
Release: 11 Release: 12
License: BSD License: BSD
Group: Archiving/Compression Group: Archiving/Compression
Url: http://www.bzip.org/index.html Url: http://www.bzip.org/index.html
@ -16,6 +16,7 @@ Source1: bzgrep
Source2: bzme Source2: bzme
Source3: bzme.1 Source3: bzme.1
Patch0: bzip2-1.0.6-makefile.diff Patch0: bzip2-1.0.6-makefile.diff
Patch1: bzip2-1.0.6-CVE-2016-3189.patch
BuildRequires: libtool BuildRequires: libtool
BuildRequires: texinfo BuildRequires: texinfo
%if %{with pdf} %if %{with pdf}
@ -81,6 +82,7 @@ will use the bzip2 library (aka libz2).
%prep %prep
%setup -q %setup -q
%patch0 -p1 -b .makefile %patch0 -p1 -b .makefile
%patch1 -p1 -b .CVE-2016-3189
echo "lib = %{_lib}" >> config.in echo "lib = %{_lib}" >> config.in
echo "CFLAGS = %{optflags}" >> config.in echo "CFLAGS = %{optflags}" >> config.in