[Rpm-maint] [rpm-software-management/rpm] Harden against crafted inputs (#1471)

[Demi Marie Obenour]

This makes vulnerabilities less likely by:

- Preventing an out-of-bounds read on 32-bit systems.
- Adding `-fno-strict-overflow`, `-fwrapv`, and `-fwrapv-pointer`
- Avoid some undefined pointer arithmetic
- Requiring signature headers to be contiguous.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1471

-- Commit Summary --

  * Harden against crafted inputs

-- File Changes --

    M configure.ac (2)
    M lib/header.c (10)
    M lib/rpmchecksig.c (4)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1471.patch
https://github.com/rpm-software-management/rpm/pull/1471.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1471
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20201229/3d635cbf/attachment-0001.html>