Bug 149451 - bzip2 1.0.2 minor zlib compatibility layer bug (missing NULLptr check)
Summary: bzip2 1.0.2 minor zlib compatibility layer bug (missing NULLptr check)
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: bzip2
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Ivana Varekova
QA Contact: Ben Levenson
URL: http://bugs.gentoo.org/show_bug.cgi?i...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-02-23 05:33 UTC by Mike Frysinger
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version: 1.0.3-1
Clone Of:
Environment:
Last Closed: 2005-09-05 01:10:18 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Mike Frysinger 2005-02-23 05:33:22 UTC 
just forwarding a bug that we've fixed in Gentoo ...

summary:
BZ2_bzclose fails to perform a NULL pointer check before actually
using the passed BZFILE * argument. The NULL check *is* performed but
only after the argument is used for the first time, resulting in a
potential NULL pointer dereference.

patch:
http://www.gentoo.org/cgi-bin/viewcvs.cgi/*checkout*/app-arch/bzip2/files/bzip2-1.0.2-NULL-ptr-check.patch?rev=1.1
path author: Mihai Limbasan <mihailim>
Comment 1 Ivana Varekova 2005-08-29 14:15:09 UTC 
Hello,
thank you for your notic, attached patch was used in the last version of bzip2
(bzip2-1.0.3-1).
Note You need to log in before you can comment on or make changes to this bug.