From 326d7d446d6111cb9e0659996a9a7f2687cfdb1e Mon Sep 17 00:00:00 2001 From: tb Date: Tue, 9 Aug 2022 07:38:25 +0000 Subject: [PATCH] Pull in inflateGetHeader() buffer overflow fix --- gnu/usr.bin/perl/cpan/Compress-Raw-Zlib/zlib-src/inflate.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gnu/usr.bin/perl/cpan/Compress-Raw-Zlib/zlib-src/inflate.c b/gnu/usr.bin/perl/cpan/Compress-Raw-Zlib/zlib-src/inflate.c index d5369c275a2..2060956978a 100644 --- a/gnu/usr.bin/perl/cpan/Compress-Raw-Zlib/zlib-src/inflate.c +++ b/gnu/usr.bin/perl/cpan/Compress-Raw-Zlib/zlib-src/inflate.c @@ -761,8 +761,9 @@ int ZEXPORT inflate( if (copy > have) copy = have; if (copy) { if (state->head != Z_NULL && - state->head->extra != Z_NULL) { - len = state->head->extra_len - state->length; + state->head->extra != Z_NULL && + (len = state->head->extra_len - state->length) < + state->head->extra_max) { zmemcpy(state->head->extra + len, next, len + copy > state->head->extra_max ? state->head->extra_max - len : copy); -- 2.20.1