The gentoo security guys found another way to segfault busybox's decompression
authorRob Landley <rob@landley.net>
Mon, 20 Feb 2006 02:18:03 +0000 (02:18 -0000)
committerRob Landley <rob@landley.net>
Mon, 20 Feb 2006 02:18:03 +0000 (02:18 -0000)
commiteb00afb2d5bf926b08a8a9b3ca59298c2a32d8b9
treed70e64b1bb6f544737b5d61fd07699d30a63981e
parentdce17c6268b16646f4918cc4f3ee84a0ea1c0e9c
The gentoo security guys found another way to segfault busybox's decompression
code: we can do a null dereference if one of our huffman tables has all zero
length codes.  This fixes it.  (Thanks solar.)
archival/libunarchive/decompress_unzip.c