[klibc] cpio: Fix possible crash on 64-bit systems
authorBen Hutchings <ben@decadent.org.uk>
Wed, 28 Apr 2021 17:46:47 +0000 (19:46 +0200)
committerBen Hutchings <benh@debian.org>
Sat, 5 Jun 2021 18:20:42 +0000 (19:20 +0100)
commit46b627557a1cae4695c02f67f7b4ad80ef6d723d
tree58a47d7077870b2fac4b5e46d287acb5c059df20
parent000b91d6bc7866d1d46c251f662f2db9b6e0bf98
[klibc] cpio: Fix possible crash on 64-bit systems

Origin: https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=2e48a12ab1e30d43498c2d53e878a11a1b5102d5
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2021-31871

copyin_link() tries to allocate (unsigned int)c_filesize + 1 bytes.
If c_filesize == UINT_MAX, this works out as 0 bytes, resulting in a
null pointer and a subsequent SIGSEGV.

The previous commit made this impossible on 32-bit systems.

CVE-2021-31871

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Name 0040-klibc-cpio-Fix-possible-crash-on-64-bit-systems.patch
usr/utils/cpio.c