libdpkg: Handle non end-of-tape errors from tar_header_decode()

We need to assign a status value in the non end-of-tape branch,
otherwise we are using an uninitialized value, which might be anything,
and could end up making the code proceed even if the archive is
damaged/broken, etc.

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/dpkg/tarfn.c b/lib/dpkg/tarfn.c
index 757e0e323..7ccdae389 100644
--- a/lib/dpkg/tarfn.c
+++ b/lib/dpkg/tarfn.c
@@ -466,6 +466,8 @@ tar_extractor(struct tar_archive *tar)
 			if (h.name[0] == '\0') {
 				/* End Of Tape. */
 				status = 0;
+			} else {
+				status = -1;
 			}
 			tar_entry_destroy(&h);
 			break;