DevComp/zip-rs-wasm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: Panic when reading a file truncated in the middle of an XZ block header

Browse source
This commit is contained in:
Chris Hennick 2024-07-15 15:07:21 -07:00
parent 1e7085fd10
commit 86568263c6
No known key found for this signature in database
GPG key ID: DA47AABA4961C509
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/read/xz.rs
View file

@ -224,7 +224,10 @@ impl<R: Read> Read for XzDecoder<R> {
} }
digest.update(&b); digest.update(&b);
} }
let mut b = vec![0u8; header_end - *reader.count]; let Some(padding_bytes) = header_end.checked_sub(*reader.count) else {
return error("Invalid XZ block header (too short)");
};
let mut b = vec![0u8; padding_bytes];
reader.read_exact(b.as_mut_slice())?; reader.read_exact(b.as_mut_slice())?;
if !b.iter().all(|&b| b == 0) { if !b.iter().all(|&b| b == 0) {
return error("Invalid XZ block header padding"); return error("Invalid XZ block header padding");