summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/tar/files/CVE-2022-48303.patch
diff options
context:
space:
mode:
Diffstat (limited to 'meta/recipes-extended/tar/files/CVE-2022-48303.patch')
-rw-r--r--meta/recipes-extended/tar/files/CVE-2022-48303.patch36
1 files changed, 0 insertions, 36 deletions
diff --git a/meta/recipes-extended/tar/files/CVE-2022-48303.patch b/meta/recipes-extended/tar/files/CVE-2022-48303.patch
deleted file mode 100644
index a8e9f4ac7d..0000000000
--- a/meta/recipes-extended/tar/files/CVE-2022-48303.patch
+++ /dev/null
@@ -1,36 +0,0 @@
1From 1d530107a24d71e798727d7f0afa0833473d1074 Mon Sep 17 00:00:00 2001
2From: =?UTF-8?q?Matej=20Mu=C5=BEila?= <mmuzila@gmail.com>
3Date: Wed, 11 Jan 2023 08:55:58 +0100
4Subject: [PATCH] Fix savannah bug #62387
5
6* src/list.c (from_header): Check for the end of field after leading byte
7 (0x80 or 0xff) of base-256 encoded header value
8
9Upstream-Status: Backport
10[https://savannah.gnu.org/patch/download.php?file_id=54212]
11CVE: CVE-2022-48303
12Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
13---
14 src/list.c | 6 ++++++
15 1 file changed, 6 insertions(+)
16
17diff --git a/src/list.c b/src/list.c
18index 9fafc425..bf41b581 100644
19--- a/src/list.c
20+++ b/src/list.c
21@@ -895,6 +895,12 @@ from_header (char const *where0, size_t digs, char const *type,
22 << (CHAR_BIT * sizeof (uintmax_t)
23 - LG_256 - (LG_256 - 2)));
24 value = (*where++ & ((1 << (LG_256 - 2)) - 1)) - signbit;
25+ if (where == lim)
26+ {
27+ if (type && !silent)
28+ ERROR ((0, 0, _("Archive base-256 value is invalid")));
29+ return -1;
30+ }
31 for (;;)
32 {
33 value = (value << LG_256) + (unsigned char) *where++;
34--
352.38.1
36