apt/apt-pkg/deb/debfile.cc, branch 2.9.1Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.12024-02-20T12:49:04ZModernize standard library includes2024-02-20T12:49:04ZJulian Andres Klodejulian.klode@canonical.com2024-02-20T12:43:08Zurn:sha1:40a75722c43ae24cb9a99d6730a3b25b65819c49
This was automated with sed and git-clang-format, and then I had to
fix up the top of policy.cc by hand as git-clang-format accidentally
indented it by two spaces.
Guess compressor only if no AR nember with exact name exists2021-02-02T18:56:46ZDavid Kalnischkiesdavid@kalnischkies.de2020-12-02T14:51:09Zurn:sha1:f2c087449286812823d06d1b560fa947e438fa0d
Explicitly opening a tar member is a bit harder than it needs to be as
you have to remove the compressor extension so that it can be guessed
here gain potentially choosing the wrong member.
Doesn't really matter for deb packages of course as the member count is
pretty low and strongly defined, but testing is easier this way.
It also finally fixes an incorrectly formatted error message.
CVE-2020-27350: debfile: integer overflow: Limit control size to 64 MiB2020-12-09T16:30:43ZJulian Andres Klodejulian.klode@canonical.com2020-12-05T19:17:56Zurn:sha1:0444f9dd52c2bc7bec315f6f1ecad76a30713fa0
Like the code in arfile.cc, MemControlExtract also has buffer
overflows, in code allocating memory for parsing control files.
Specify an upper limit of 64 MiB for control files to both protect
against the Size overflowing (we allocate Size + 2 bytes), and
protect a bit against control files consisting only of zeroes.
Merge libapt-inst into libapt-pkg2019-05-06T10:14:04ZJulian Andres Klodejulian.klode@canonical.com2019-05-06T09:40:08Zurn:sha1:dfe2511e31f232a8a8880eba40af40d1deb0e49c