[Midnightbsd-cvs] [MidnightBSD/src] df4e47: zlib through 1.2.12 has a heap-based buffer over-r...

[Lucas Holt]

  Branch: refs/heads/stable/2.0
  Home:   https://github.com/MidnightBSD/src
  Commit: df4e4712a684d77719f79c8e7d617b08f795875e
      https://github.com/MidnightBSD/src/commit/df4e4712a684d77719f79c8e7d617b08f795875e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-08-31 (Wed, 31 Aug 2022)

  Changed paths:
    M sys/contrib/zlib/inflate.c

  Log Message:
  -----------
  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field.

Obtained from: FreeBSD


  Commit: 6193e569e7927d5bf6f83b8d595dddebc991cd18
      https://github.com/MidnightBSD/src/commit/6193e569e7927d5bf6f83b8d595dddebc991cd18
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-08-31 (Wed, 31 Aug 2022)

  Changed paths:
    M contrib/zlib/inflate.c

  Log Message:
  -----------
  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field.


Compare: https://github.com/MidnightBSD/src/compare/926c6094d001...6193e569e792