[Rpm-maint] [rpm-software-management/rpm] Harden against crafted inputs (#1471)
Panu Matilainen
notifications at github.com
Mon Jan 11 11:05:46 UTC 2021
@pmatilai commented on this pull request.
> @@ -169,8 +169,8 @@ rpmRC rpmpkgRead(struct rpmvs_s *vs, FD_t fd,
goto exit;
}
- /* Read the signature header. Might not be in a contiguous region. */
- if (hdrblobRead(fd, 1, 0, RPMTAG_HEADERSIGNATURES, sigblob, &msg))
+ /* Read the signature header. Must be in a contiguous region. */
+ if (hdrblobRead(fd, 1, 1, RPMTAG_HEADERSIGNATURES, sigblob, &msg))
You seriously think you're the first ever person to throw a fuzzer at rpm? Really now...
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1471#discussion_r554970065
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210111/d22f48ba/attachment.html>
More information about the Rpm-maint
mailing list