624428 – app-arch/xar: NULL pointer dereference in xar_get_path (util.c)

Bug 624428 - app-arch/xar: NULL pointer dereference in xar_get_path (util.c)

Summary: app-arch/xar: NULL pointer dereference in xar_get_path (util.c)

Status:	RESOLVED DUPLICATE of bug 624642

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal trivial (vote)
Assignee:	Gentoo Security

URL:	https://github.com/mackyle/xar/issues/16
Whiteboard:	~4 [noglsa cve]
Keywords:

Depends on:
Blocks:

Reported:	2017-07-10 11:55 UTC by Christopher Díaz Riveros (RETIRED)
Modified:	2018-01-19 20:27 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christopher Díaz Riveros (RETIRED) gentoo-dev

2017-07-10 11:55:33 UTC

References:

https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_get_path-util-c/

Comment 1 Christopher Díaz Riveros (RETIRED) gentoo-dev

2017-07-21 03:59:57 UTC

Package has no maintainer, CCing maintainer-needed

Comment 2 Michał Górny archtester

2018-01-19 19:34:58 UTC

Supposedly fixed in 1.8 (according to bug #624642).

Comment 3 Fabian Groffen gentoo-dev

2018-01-19 19:38:50 UTC

Yes the confirming in bug #624642 was done using a Gentoo Linux amd64 box.

Comment 4 Aaron Bauman (RETIRED) gentoo-dev

2018-01-19 20:27:18 UTC

Yet again... duplicate report.  CVE freed.

*** This bug has been marked as a duplicate of bug 624642 ***