mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-23 09:10:43 +00:00
Code Issues Releases Activity

Fix integer overflow.

Browse Source
This commit is contained in:
Alex Dupre 2012-06-02 06:39:36 +00:00
parent 521778cdb4
commit 33625b9448
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=297990
2 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
archivers/php5-phar/Makefile
View File

@ -5,6 +5,7 @@
# $FreeBSD$
#
PORTREVISION= 1
CATEGORIES= archivers
MASTERDIR= ${.CURDIR}/../../lang/php5

18
archivers/php5-phar/files/patch-tar.c Normal file
View File

@ -0,0 +1,18 @@
--- tar.c.orig 2012-06-02 08:29:43.000000000 +0200
+++ tar.c 2012-06-02 08:31:37.000000000 +0200
@@ -337,6 +337,15 @@
last_was_longlink = 1;
/* support the ././@LongLink system for storing long filenames */
entry.filename_len = entry.uncompressed_filesize;
+ /* Check for overflow - bug 61065 */
+ if (entry.filename_len == UINT_MAX) {
+ if (error) {
+ spprintf(error, 4096, "phar error: \"%s\" is a corrupted tar file (invalid entry size)", fname);
+ }
+ php_stream_close(fp);
+ phar_destroy_phar_data(myphar TSRMLS_CC);
+ return FAILURE;
+ }
entry.filename = pemalloc(entry.filename_len+1, myphar->is_persistent);
read = php_stream_read(fp, entry.filename, entry.filename_len);