Re: [Bug-cpio] Segfault when updating newc archives

[Pavel Raiskup]

Thanks for the report.

On Wednesday, November 28, 2018 3:18:13 PM CET Burton, Ross wrote:
> Using current git master of cpio, and introduced with the
> CVE-2016-2037 out-of-bounds patch, I can trivially crash cpio.  For
> example from the top of the cpio git clone:
> 
> $ find gnulib/ | ./src/cpio -o -H newc >foo.cpio
> 70240 blocks
> $ echo NEWS | ./src/cpio  -oA  -H newc -F foo.cpio
> Segmentation fault (core dumped)

Please have a look at the attached patch.

Pavel

0001-Fix-segfault-with-append.patch
Description: Text Data