This is an automated email from the git hooks/post-receive script. guillem pushed a commit to branch master in repository dpkg.
View the commit online: https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=b885b73443f8af8ad0cad4c10a35e5511448b020 commit b885b73443f8af8ad0cad4c10a35e5511448b020 Author: Guillem Jover <[email protected]> AuthorDate: Fri Aug 28 01:01:34 2020 +0200 libdpkg: Check that the ar archive time is within bounds --- lib/dpkg/ar.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/dpkg/ar.c b/lib/dpkg/ar.c index 57d304ce8..6eea5ad13 100644 --- a/lib/dpkg/ar.c +++ b/lib/dpkg/ar.c @@ -172,6 +172,8 @@ dpkg_ar_member_put_header(struct dpkg_ar *ar, struct dpkg_ar_member *member) ohshit(_("ar member name '%s' length too long"), member->name); if (member->size > 9999999999L) ohshit(_("ar member size %jd too large"), (intmax_t)member->size); + if (member->time > 999999999999L) + ohshit(_("ar member time %jd too large"), (intmax_t)member->time); n = snprintf(header, sizeof(struct dpkg_ar_hdr) + 1, "%-16s%-12jd%-6lu%-6lu%-8lo%-10jd`\n", -- Dpkg.Org's dpkg
