Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2018-11202 #3330

Merged
merged 4 commits into from
Aug 2, 2023
Merged

Fix CVE-2018-11202 #3330

merged 4 commits into from
Aug 2, 2023

Commits on Aug 2, 2023

  1. Fixes CVE-2018-11202

    A malformed file could result in chunk index memory leaks. Under most
    conditions (i.e., when the --enable-using-memchecker option is NOT
    used), this would result in a small memory leak and and infinite loop
    and abort when shutting down the library. The infinite loop would be
    due to the "free list" package not being able to clear its resources
    so the library couldn't shut down. When the "using a memory checker"
    option is used, the free lists are disabled so there is just a memory
    leak with no abort on library shutdown.
    
    The chunk index resources are now correctly cleaned up when reading
    misparsed files and valgrind confirms no memory leaks.
    derobins committed Aug 2, 2023
    Configuration menu
    Copy the full SHA
    6713ba2 View commit details
    Browse the repository at this point in the history
  2. Format source

    derobins committed Aug 2, 2023
    Configuration menu
    Copy the full SHA
    179f00f View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    a277e9b View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    aa825c1 View commit details
    Browse the repository at this point in the history