Bug#872475: libisofs6: buffer under-read in read_rr_SL()

2017-08-18 Thread Thomas Schmitt
Hi, that snappy little Fluffball created an SL entry with an empty path component. I understand it looks for suspicious code pieces and then tries to activate them by submitting a series of nasty input files. So i will not complain about its character, but only about its harmless look (*). The b

Bug#872475: libisofs6: buffer under-read in read_rr_SL()

2017-08-17 Thread Jakub Wilk
* Thomas Schmitt , 2017-08-17, 21:36: i see the bug in the code but not the attached ISO. Oops. Now really attached. -- Jakub Wilk underread.iso.gz Description: application/gzip

Bug#872475: libisofs6: buffer under-read in read_rr_SL()

2017-08-17 Thread Thomas Schmitt
Hi, i see the bug in the code but not the attached ISO. It would be helpful for testing a fix and might give me more ideas about what to harden. Have a nice day :) Thomas

Bug#872475: libisofs6: buffer under-read in read_rr_SL()

2017-08-17 Thread Jakub Wilk
Package: libisofs6 Version: 1.4.6-1 The read_rr_SL() function contains the following code: size_t size = strlen(*dest); *dest = realloc(*dest, strlen(*dest) + len + 2); if (*dest == NULL) { return ISO_OUT_OF_MEM; } /* it is a new compoenent, add the '/' */ if ((*dest)[size-1] !