[Opensc-commits] [OpenSC/OpenSC] b7690a: sc_decompress_zlib_alloc: check inputs, avoid int ...

[Frank M. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: b7690a45d790caf10913666617966f13d6c32709
      https://github.com/OpenSC/OpenSC/commit/b7690a45d790caf10913666617966f13d6c32709
  Author: Frank Morgner <fra...@gm...>
  Date:   2020-01-20 (Mon, 20 Jan 2020)

  Changed paths:
    M src/libopensc/compression.c

  Log Message:
  -----------
  sc_decompress_zlib_alloc: check inputs, avoid int underflow

- turns out, you can shrink a buffer with realloc on some implementations
- realloc is never called with 0 (which would free the data)
- length checking is done in zlib, we just do the allocation

closes https://github.com/OpenSC/OpenSC/issues/1905


  Commit: 0ae344194983200776fd0710ebbd1555b570c14c
      https://github.com/OpenSC/OpenSC/commit/0ae344194983200776fd0710ebbd1555b570c14c
  Author: Frank Morgner <fra...@gm...>
  Date:   2020-01-22 (Wed, 22 Jan 2020)

  Changed paths:
    M src/libopensc/compression.c

  Log Message:
  -----------
  adapt to comment


  Commit: a501c0d18555baef80f81011de18ed63c9103986
      https://github.com/OpenSC/OpenSC/commit/a501c0d18555baef80f81011de18ed63c9103986
  Author: Frank Morgner <fra...@gm...>
  Date:   2020-01-30 (Thu, 30 Jan 2020)

  Changed paths:
    M src/libopensc/compression.c

  Log Message:
  -----------
  sc_decompress_zlib_alloc: check inputs, avoid int underflow (#1907)

- turns out, you can shrink a buffer with realloc on some implementations
- realloc is never called with 0 (which would free the data)
- length checking is done in zlib, we just do the allocation

closes https://github.com/OpenSC/OpenSC/issues/1905


Compare: https://github.com/OpenSC/OpenSC/compare/b119781b0218...a501c0d18555