Bug#773659: cabextract: null pointer dereference on a crafted CAB

2015-01-14 Thread Stuart Caie
On 11/01/2015 21:15, Sebastian Andrzej Siewior wrote: On 2015-01-11 16:31:30 [+], Stuart Caie wrote: This is an accurate summary. There are two cab files found, the second of Sorry for the inaccurate summary. No, the summary was accurate :) Are you also aware of the two recent reports

Bug#773659: cabextract: null pointer dereference on a crafted CAB

2015-01-11 Thread Stuart Caie
On 05/01/2015 20:50, Sebastian Andrzej Siewior wrote: The -search callback of the mspack library finds two cab files within the one you attached. The internal structure gets real funny. afl managed to create a .cab file which contains a valid file, followed by one which contains an invalid

Bug#773659: cabextract: null pointer dereference on a crafted CAB

2015-01-11 Thread Sebastian Andrzej Siewior
On 2015-01-11 16:31:30 [+], Stuart Caie wrote: This is an accurate summary. There are two cab files found, the second of Sorry for the inaccurate summary. This is now fixed in the repository version of cabextract / libmspack. New releases will be made soon. Thank you. Are you also aware

Bug#773659: cabextract: null pointer dereference on a crafted CAB

2015-01-05 Thread Sebastian Andrzej Siewior
* Jakub Wilk | 2014-12-21 18:35:36 [+0100]: Package: cabextract Version: 1.4-4+b1 Usertags: afl cabextract crashes (trying to dereference null pointed) on the attached crafted CAB file: Jakub, please fill future bugs against libmspack and CC the clamav team. I am interrested in getting those

Bug#773659: cabextract: null pointer dereference on a crafted CAB

2014-12-21 Thread Jakub Wilk
Package: cabextract Version: 1.4-4+b1 Usertags: afl cabextract crashes (trying to dereference null pointed) on the attached crafted CAB file: $ gpg -d nullderef.cab.asc nullderef.cab $ cabextract -t nullderef.cab nullderef.cab: WARNING; possible 1626 extra bytes at end of file. Testing