openbsd/src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2026-04-30 00:56:33 +00:00
Code Issues Projects Releases Wiki Activity

Avoid leak in proc_parser_file() gzip path

Browse Source 
Release the old object before overwriting the buf pointer.

CID 643464

OK claudio@
This commit is contained in:
job
2026-02-15 17:55:14 +00:00
parent d67f8546f2
commit 5720d63d98
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
usr.sbin/rpki-client/filemode.c
View File

@@ -1,4 +1,4 @@
/* $OpenBSD: filemode.c,v 1.81 2026/02/03 16:21:37 tb Exp $ */
/* $OpenBSD: filemode.c,v 1.82 2026/02/15 17:55:14 job Exp $ */
/*
* Copyright (c) 2019 Claudio Jeker <claudio@openbsd.org>
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
@@ -457,13 +457,17 @@ proc_parser_file(char *file, unsigned char *in_buf, size_t len)
}
if (rtype_from_file_extension(file) == RTYPE_GZ) {
unsigned char *full_buf = NULL;
size_t full_len;
char *gz_ext;
if ((buf = inflate_buffer(buf, len, &full_len)) == NULL) {
if ((full_buf = inflate_buffer(buf, len, &full_len)) == NULL) {
warnx("%s: gzip decompression failed", file);
goto out;
}
if (buf != in_buf)
free(buf);
buf = full_buf;
len = full_len;
/* zap trailing .gz */