kc3-lang/bzip2/bzip2recover.c

---

bzip2recover.c

Branch - branch -masterorigin/masterupstream/HEADupstream/master

---

Log

Author	Commit	Date	CI	Message
	6a8690fc	2019-07-13T17:17:58		Prepare for 1.0.8 release.
	f319b98a	2019-06-27T20:10:07		Prepare for 1.0.7 release.
	c1cdd98d	2019-06-24T00:45:32		bzip2recover: Fix use after free issue with outFile. bzip2recover.c (main): Make sure to set outFile to NULL when done. This was reported as CVE-2016-3189 and found in multiple distributions. https://seclists.org/oss-sec/2016/q2/568 Some more analysis can be found in: https://bugzilla.redhat.com/show_bug.cgi?id=1319648
	833548ed	2019-06-24T00:14:02		bzip2recover: Fix buffer overflow for large argv[0]. bzip2recover.c (main) copies argv[0] to a statically sized buffer without checking whether argv[0] might be too big (> 2000 chars). This patch comes from Fedora and was originally reported at https://bugzilla.redhat.com/show_bug.cgi?id=226979
	5b923861	2019-03-30T22:56:16		Change Julian's email address to jseward@acm.org
	962d6061	2010-09-06T22:13:13		bzip2-1.0.6
	a1d78c55	2007-12-10T22:13:13		bzip2-1.0.5
	f10a3353	2006-12-20T22:13:13		bzip2-1.0.4
	4d540bfc	2005-02-15T22:13:13		bzip2-1.0.3
	099d8442	2001-12-30T22:13:13		bzip2-1.0.2
	795b859e	2000-06-24T22:13:13		bzip2-1.0.1
	f93cd82a	1999-09-04T22:13:13		bzip2-0.9.5d
	977101ad	1998-08-23T22:13:13		bzip2-0.9.0c
	1eb67a9d	1997-08-29T22:13:13		bzip2-0.1pl2
	33d13403	1997-08-07T22:13:13		bzip2-0.1