meta/recipes-extended/bzip2/bzip2-1.0.6/CVE-2016-3189.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

Upstream-Status: Backport
https://bugzilla.suse.com/attachment.cgi?id=681334

CVE: CVE-2016-3189
Signed-off-by: Armin Kuster <akuster@mvista.com>

Index: bzip2-1.0.6/bzip2recover.c
===================================================================
--- bzip2-1.0.6.orig/bzip2recover.c
+++ bzip2-1.0.6/bzip2recover.c
@@ -457,6 +457,7 @@ Int32 main ( Int32 argc, Char** argv )
             bsPutUChar ( bsWr, 0x50 ); bsPutUChar ( bsWr, 0x90 );
             bsPutUInt32 ( bsWr, blockCRC );
             bsClose ( bsWr );
+            outFile = NULL;
          }
          if (wrBlock >= rbCtr) break;
          wrBlock++;