Package: unalz
Version: 0.65-5

unalz crashes on this file:

  $ printf 'ALZ\1' > crash.alz
  $ unalz -l crash.alz
  unalz v0.65 (2009/04/01)
  Copyright(C) 2004-2009 by (
  Segmentation fault

Valgrind says it's a null pointer dereference:

  Invalid read of size 4
     at 0x4ACE446: fread (iofread.c:37)
     by 0x10AA67: UNALZ::CUnAlz::FRead(void*, unsigned int, int*) 
     by 0x10ACE4: UNALZ::CUnAlz::ReadAlzFileHeader() (UnAlz.cpp:381)
     by 0x10C72C: UNALZ::CUnAlz::Open(char const*) (UnAlz.cpp:309)
     by 0x109431: main (main.cpp:290)
   Address 0x0 is not stack'd, malloc'd or (recently) free'd

Found using American Fuzzy Lop:

-- System Information:
Architecture: i386

Versions of packages unalz depends on:
ii  libbz2-1.0  1.0.6-8.1
ii  libc6       2.24-14
ii  libgcc1     1:7.1.0-13
ii  libstdc++6  7.1.0-13
ii  zlib1g      1:1.2.8.dfsg-5

Jakub Wilk

Reply via email to