cosmopolitan
cosmopolitan copied to clipboard
Fix: Potential Vulnerability in bzip2 Library
This PR fixes a security vulnerability in inflate() that was cloned from zlib but did not receive the security patch applied in zlib. The original issue was reported and fixed under https://gitlab.com/federicomenaquintero/bzip2/-/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc.
This PR applies the same patch as the one in zlib to eliminate the vulnerability.
References https://nvd.nist.gov/vuln/detail/CVE-2019-12900 https://gitlab.com/federicomenaquintero/bzip2/-/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
@jart Can this 1-line security patch be applied?