diff options
| author | Guillem Jover <guillem@debian.org> | 2014-05-11 08:11:22 +0200 |
|---|---|---|
| committer | Guillem Jover <guillem@debian.org> | 2014-05-17 09:29:09 +0200 |
| commit | 9274fe071004f02dcd64eba5f40b342e40bc2fd1 (patch) | |
| tree | 965bddd1d81663196e1e777bb1d8d0d38a739f89 /lib | |
| parent | df4f36e172b43bdb2336ba5a2747da439f1fc09d (diff) | |
| download | dpkg-9274fe071004f02dcd64eba5f40b342e40bc2fd1.tar.gz | |
libdpkg: Swap deb name and member name in dpkg_ar_member_get_size()
Otherwise we might perform an out of bounds buffer read access in the
error output on bogus member sizes.
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/dpkg/ar.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/dpkg/ar.c b/lib/dpkg/ar.c index 96c226416..cf540a069 100644 --- a/lib/dpkg/ar.c +++ b/lib/dpkg/ar.c @@ -77,7 +77,7 @@ dpkg_ar_member_get_size(const char *ar_name, struct ar_hdr *arh) if (*str < '0' || *str > '9') ohshit(_("invalid character '%c' in archive '%.250s' " "member '%.16s' size"), - *str, arh->ar_name, ar_name); + *str, ar_name, arh->ar_name); size *= 10; size += *str++ - '0'; |