bug#33501: Malformed inputs triggering uninitialized memory use in inflate_dynamic()

2018-11-25 Thread Hanno Böck
OURCE" LDFLAGS="-fsanitize=undefined -U_FORTIFY_SOURCE" And then run the above sample with gzip -dc. (msan is incompatible with fortify source and some distros set it by default, so it's better to unset it.) -- Hanno Böck https://hboeck.de/ mail/ja

bug#33501: Malformed inputs triggering uninitialized memory use in inflate_dynamic()

2018-11-30 Thread Hanno Böck
endencies, for a simple tool like gzip which only depends on libc it works pretty straightforward.) -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42