]> sourceware.org Git - bzip2.git/commit
git://sourceware.org / bzip2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 833548e) | patch
bzip2recover: Fix use after free issue with outFile.
authorMark Wielaard <mark@klomp.org>
Sun, 23 Jun 2019 22:45:32 +0000 (00:45 +0200)
committerMark Wielaard <mark@klomp.org>
Sun, 23 Jun 2019 22:58:47 +0000 (00:58 +0200)
commitc1cdd98db3238cb711c7d9cdc5671452ce2822cb
treeab84c05bb15b96f655c1914a9907a38c4d76f0fetree
parent833548edc0eb4af85ce8da193835f0f31a6c300fcommit | diff
bzip2recover: Fix use after free issue with outFile.

bzip2recover.c (main): Make sure to set outFile to NULL when done.

This was reported as CVE-2016-3189 and found in multiple distributions.
https://seclists.org/oss-sec/2016/q2/568

Some more analysis can be found in:
https://bugzilla.redhat.com/show_bug.cgi?id=1319648
bzip2recover.c diff | blob | blame | history
bzip2 code
This page took 0.026083 seconds and 5 git commands to generate.