006-CVE-2015-7697-infinite-loop.patch (421B)
1 --- a/extract.c 2 +++ b/extract.c 3 @@ -2728,6 +2728,12 @@ __GDEF 4 int repeated_buf_err; 5 bz_stream bstrm; 6 7 + if (G.incnt <= 0 && G.csize <= 0L) { 8 + /* avoid an infinite loop */ 9 + Trace((stderr, "UZbunzip2() got empty input\n")); 10 + return 2; 11 + } 12 + 13 #if (defined(DLL) && !defined(NO_SLIDE_REDIR)) 14 if (G.redirect_slide) 15 wsize = G.redirect_size, redirSlide = G.redirect_buffer;