Potential Vulnerability in Cloned Code

[tabudz]

Summary

Our tool detected a potential vulnerability in src/external/zlib/crc32.c which was cloned from madler/zlib but did not receive the security patch applied. The original issue was reported and fixed under https://nvd.nist.gov/vuln/detail/cve-2016-9843.

Proposed Fix

Apply the same patch as the one in madler/zlib to eliminate the vulnerability.

Reference

https://nvd.nist.gov/vuln/detail/cve-2016-9843 https://github.com/madler/zlib/commit/d1d577490c15a0c6862473d7576352a9f18ef811