[Midnightbsd-cvs] [MidnightBSD/src] 994483: zlib through 1.2.12 has a heap-based buffer over-r...

[Lucas Holt]

  Branch: refs/heads/stable/1.2
  Home:   https://github.com/MidnightBSD/src
  Commit: 994483da198e0b8882dd825e20afc34051363d0a
      https://github.com/MidnightBSD/src/commit/994483da198e0b8882dd825e20afc34051363d0a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-08-31 (Wed, 31 Aug 2022)

  Changed paths:
    M sys/cddl/contrib/opensolaris/uts/common/zmod/inflate.c

  Log Message:
  -----------
  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field.

Obtained from: FreeBSD


  Commit: a57555d2c33466b31611f462f1120b8657101c1c
      https://github.com/MidnightBSD/src/commit/a57555d2c33466b31611f462f1120b8657101c1c
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-09-01 (Thu, 01 Sep 2022)

  Changed paths:
    M contrib/zlib/inflate.c

  Log Message:
  -----------
  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field.


Compare: https://github.com/MidnightBSD/src/compare/15c69e23519c...a57555d2c334