Package: pax
Version: 1:20161104-2

pax crashes on some malformed ar archives:

  $ printf '!<arch>\n#1/3%011d %042d`\n' | pax
  Segmentation fault

Valgrind says it's an out-of-bounds write:

  Invalid write of size 1
     at 0x10A3BF: uar_rd (ar.c:174)
     by 0x10CA78: next_head (ar_subs.c:1109)
     by 0x10D15E: list (ar_subs.c:104)
     by 0x109DD6: main (pax.c:296)
   Address 0xd81ec390 is not stack'd, malloc'd or (recently) free'd


-- System Information:
Architecture: i386

Versions of packages pax depends on:
ii  libc6  2.24-17

--
Jakub Wilk

Reply via email to