]> granicus.if.org Git - zziplib/commit
- If an extension block is too small to hold an extension,
authorJosef Möllers <josef@firefly.moellers.local>
Tue, 6 Feb 2018 15:16:36 +0000 (16:16 +0100)
committerJosef Möllers <josef@firefly.moellers.local>
Tue, 6 Feb 2018 15:16:36 +0000 (16:16 +0100)
commit15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
tree8dec32a21567f46582321edd244973ae0c1349db
parent0c0c9256b0903f664bca25dd8d924211f81e01d3
- If an extension block is too small to hold an extension,
  do not use the information therein.
- If the End of central directory record (EOCD) contains an
  Offset of start of central directory which is beyond the end of
  the file, reject the file.
  [CVE-2018-6540]
zzip/memdisk.c
zzip/mmapped.c