diff options
| author | landley <landley@69ca8d6d-28ef-0310-b511-8ec308f3f277> | 2006-02-17 05:19:40 +0000 |
|---|---|---|
| committer | landley <landley@69ca8d6d-28ef-0310-b511-8ec308f3f277> | 2006-02-17 05:19:40 +0000 |
| commit | e9807ae605099998087c80fdd36652314235bd14 (patch) | |
| tree | 73eb0d05822d7fdb6b5986f9477ade764979053e /TODO | |
| parent | af5cb1824f1a764b0af0d0181550d06f19cbf14e (diff) | |
| download | busybox-w32-e9807ae605099998087c80fdd36652314235bd14.tar.gz busybox-w32-e9807ae605099998087c80fdd36652314235bd14.tar.bz2 busybox-w32-e9807ae605099998087c80fdd36652314235bd14.zip | |
Fix for an integer overflow bug that could cause a segfault on certain
pathological archives.
(Unlikely to have security implications, the only way to trigger it basically
wound up doing memset(dbuf,x,2^31) and triggering an immediate segfault. The
test basically gives us a more polite error message.)
Thanks to Ned Ludd and the Gentoo security guys for finding this.
git-svn-id: svn://busybox.net/trunk/busybox@14086 69ca8d6d-28ef-0310-b511-8ec308f3f277
Diffstat (limited to 'TODO')
0 files changed, 0 insertions, 0 deletions