bug#33501: Malformed inputs triggering uninitialized memory use in inflate_dynamic()

2018-11-30 Thread Hanno Böck
On Wed, 28 Nov 2018 21:09:45 + "Adler, Mark" wrote: > However I don’t have a memory sanitizer, so please verify. Thanks. It's fixed with this patch. (Also memory sanitizer is just a clang feature. While it's a bit trickier to use in complex applications due to dependencies, for a simple too

bug#33501: Malformed inputs triggering uninitialized memory use in inflate_dynamic()

2018-11-30 Thread Adler, Mark
My clang on macOS doesn’t support it. > On Nov 30, 2018, at 6:28 AM, Hanno Böck wrote: > > On Wed, 28 Nov 2018 21:09:45 + > "Adler, Mark" wrote: > >> However I don’t have a memory sanitizer, so please verify. Thanks. > > It's fixed with this patch. > > (Also memory sanitizer is just a cl

bug#33501: Malformed inputs triggering uninitialized memory use in inflate_dynamic()

2018-11-30 Thread Paul Eggert
Thanks for the fix. I installed the attached patch into the GNU gzip master and am marking this bug as done. >From 1a61dbfbb1e60f51c91682e6ed87bb404b02d851 Mon Sep 17 00:00:00 2001 From: Paul Eggert Date: Fri, 30 Nov 2018 13:00:42 -0800 Subject: [PATCH] gzip: fix use of uninitialized memory MIME-

bug#33544: gzip 1.9 alignment compile failure on cast

2018-11-30 Thread Paul Eggert
Thanks, I installed the attached patch into Gnulib. >From fff1ad350b7d1a10c136b0aa00cba9b0776cc2c7 Mon Sep 17 00:00:00 2001 From: Paul Eggert Date: Fri, 30 Nov 2018 16:25:38 -0800 Subject: [PATCH] memrchr: port better to clang * lib/memrchr.c (__memrchr): Cast to void * instead of to longword *,