mirrors/cmake
2
0 Fork 0
mirror of https://gitlab.kitware.com/cmake/cmake.git synced 2026-10-06 04:03:27 +03:00
Code Activity

Merge topic 'libarchive-cpio-hardlink-pathname'

Browse Source 
935c8525f6 libarchive: Backport "Validate pathname in record_hardlink"

Acked-by: Kitware Robot <kwrobot@kitware.com>
Tested-by: buildbot <buildbot@kitware.com>
Merge-request: !12035
This commit is contained in:
Brad King authored and Kitware Robot committed 2026-05-12 10:47:57 -04:00
2 parents 54590f1ae6 935c8525f6
commit 6de8e0070e
2 files changed
+12 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

Tests/Fuzzing/corpus/archive/no-pathname.tar
BIN
View File
Binary file not shown.
Utilities/cmlibarchive/libarchive/archive_read_support_format_cpio.c
+12 -1
View File
@@ -1102,6 +1102,16 @@ record_hardlink(struct archive_read *a,
ENOMEM, "Out of memory adding file to list");
return (ARCHIVE_FATAL);
}
const char *pathname = archive_entry_pathname(entry);
if (pathname == NULL) {
archive_set_error(&a->archive,
ARCHIVE_ERRNO_FILE_FORMAT,
"Invalid hardlink entry with no pathname");
free(le);
return (ARCHIVE_FATAL);
}
if (cpio->links_head != NULL)
cpio->links_head->previous = le;
le->next = cpio->links_head;
@@ -1110,10 +1120,11 @@ record_hardlink(struct archive_read *a,
le->dev = dev;
le->ino = ino;
le->links = archive_entry_nlink(entry) - 1;
le->name = strdup(archive_entry_pathname(entry));
le->name = strdup(pathname);
if (le->name == NULL) {
archive_set_error(&a->archive,
ENOMEM, "Out of memory adding file to list");
free(le);
return (ARCHIVE_FATAL);
}