Mirrors/libarchive
0
0
Fork 0
mirror of https://github.com/libarchive/libarchive.git synced 2026-01-18 17:11:25 +01:00
Code Packages Releases Activity

Bounds check newdir_len

Browse Source 
Honestly, this is of little consequence; if old_len is too big the program will crash anyway. However, an error exists just in case.
This commit is contained in:
AZero13
2025-11-04 19:02:08 -05:00
parent fa5f70627c
commit 45a873e998
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
tar/util.c
View File

@@ -314,7 +314,10 @@ set_chdir(struct bsdtar *bsdtar, const char *newdir)
/* The -C /foo -C bar case; concatenate */
char *old_pending = bsdtar->pending_chdir;
size_t old_len = strlen(old_pending);
size_t new_len = old_len + strlen(newdir) + 2;
size_t newdir_len = strlen(newdir);
size_t new_len = old_len + newdir_len + 2;
if (old_len > SIZE_MAX - newdir_len - 2)
lafe_errc(1, errno, "Path too long");
bsdtar->pending_chdir = malloc(new_len);
if (old_pending[old_len - 1] == '/')
old_pending[old_len - 1] = '\0';