git: 9f690fcfdc05 - main - libarchive: merge vendor bugfixes
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sun, 03 Apr 2022 12:21:53 UTC
The branch main has been updated by mm:
URL: https://cgit.FreeBSD.org/src/commit/?id=9f690fcfdc050f566466ac10cca29ff43bf4fe92
commit 9f690fcfdc050f566466ac10cca29ff43bf4fe92
Merge: 1a0bd2665a4b d0dbd88ba985
Author: Martin Matuska <mm@FreeBSD.org>
AuthorDate: 2022-04-03 12:21:28 +0000
Commit: Martin Matuska <mm@FreeBSD.org>
CommitDate: 2022-04-03 12:21:28 +0000
libarchive: merge vendor bugfixes
Bugfixes:
IS #1685 and OSS-Fuzz #38764 (security):
(ISO reader) fix possible heap buffer overflow in read_children()
IS #1715 and OSS-Fuzz #46279 (security):
(RARv4 reader) fix heap-use-after-free in run_filters()
MFC after: 3 days
.../libarchive/archive_read_support_format_iso9660.c | 3 ++-
.../libarchive/archive_read_support_format_rar.c | 17 +++++++++++++++++
2 files changed, 19 insertions(+), 1 deletion(-)