Patrick Steinhardt 2459781222 delta: fix out-of-bounds read of delta ...

When computing the offset and length of the delta base, we repeatedly
increment the `delta` pointer without checking whether we have advanced
past its end already, which can thus result in an out-of-bounds read.
Fix this by repeatedly checking whether we have reached the end. Add a
test which would cause Valgrind to produce an error.

Reported-by: Riccardo Schirone <rschiron@redhat.com>
Test-provided-by: Riccardo Schirone <rschiron@redhat.com>

2018-06-29 09:30:02 +02:00

..

apply.c

delta: fix out-of-bounds read of delta

2018-06-29 09:30:02 +02:00