aboutsummaryrefslogtreecommitdiff
path: root/utils/unzip/patches/006-CVE-2015-7697-infinite-loop.patch
blob: a8376b2153f1465c147350e278c4ec577c272368 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
--- a/extract.c
+++ b/extract.c
@@ -2728,6 +2728,12 @@ __GDEF
     int repeated_buf_err;
     bz_stream bstrm;
 
+    if (G.incnt <= 0 && G.csize <= 0L) {
+        /* avoid an infinite loop */
+        Trace((stderr, "UZbunzip2() got empty input\n"));
+        return 2;
+    }
+
 #if (defined(DLL) && !defined(NO_SLIDE_REDIR))
     if (G.redirect_slide)
         wsize = G.redirect_size, redirSlide = G.redirect_buffer;