[Rpm-maint] [rpm-software-management/rpm] Check for overflow in computing blob->rdl (#1583)

[Demi Marie Obenour]

By using GCC’s overflow-checking builtins, we avoid needing to reason
about overflow manually, which is error-prone.  Having GCC do the
arithmetic in infinite signed precision is much nicer.

This was assigned CVE-2021-20249, which is why I am making this PR.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1583

-- Commit Summary --

  * Check for overflow in computing blob->rdl

-- File Changes --

    M lib/header.c (7)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1583.patch
https://github.com/rpm-software-management/rpm/pull/1583.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1583
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210317/43af9ec9/attachment.html>