From 866526055a97d1b56d5ec55c4967953275824c64 Mon Sep 17 00:00:00 2001 From: Packit Service Date: Dec 09 2020 21:12:24 +0000 Subject: Apply patch libxml2-CVE-2018-9251.patch patch_name: libxml2-CVE-2018-9251.patch present_in_specfile: true location_in_specfile: 6 --- diff --git a/xzlib.c b/xzlib.c index 87ba9ae..0f2ddc0 100644 --- a/xzlib.c +++ b/xzlib.c @@ -562,6 +562,10 @@ xz_decomp(xz_statep state) "internal error: inflate stream corrupt"); return -1; } + /* + * FIXME: Remapping a couple of error codes and falling through + * to the LZMA error handling looks fragile. + */ if (ret == Z_MEM_ERROR) ret = LZMA_MEM_ERROR; if (ret == Z_DATA_ERROR) @@ -587,6 +591,11 @@ xz_decomp(xz_statep state) xz_error(state, LZMA_PROG_ERROR, "compression error"); return -1; } + if ((state->how != GZIP) && + (ret != LZMA_OK) && (ret != LZMA_STREAM_END)) { + xz_error(state, ret, "lzma error"); + return -1; + } } while (strm->avail_out && ret != LZMA_STREAM_END); /* update available output and crc check value */