{"schema":"libjg2-1", "vpath":"/git/", "avatar":"/git/avatar/", "alang":"", "gen_ut":1750825485, "reponame":"libwebsockets", "desc":"libwebsockets lightweight C networking library", "owner": { "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" },"url":"https://libwebsockets.org/repo/libwebsockets", "f":3, "items": [ {"schema":"libjg2-1", "cid":"21cd67ab2dce6ba62385527f491340cd", "commit": {"type":"commit", "time": 1727928855, "time_ofs": 60, "oid_tree": { "oid": "761efe2c1ed4c59b89300eed4dfa5f1c34b1fefd", "alias": []}, "oid":{ "oid": "56cc214ac7d7a4da35acf60dc9d7afacac5ef836", "alias": []}, "msg": "win32: zlib: Fix buffer overflow on inflate (CVE-2022-37434)", "sig_commit": { "git_time": { "time": 1727928855, "offset": 60 }, "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" }, "sig_author": { "git_time": { "time": 1727853194, "offset": 180 }, "name": "Orgad Shaneh", "email": "orgad.shaneh@audiocodes.com", "md5": "80e2bb4e77e8d796898c545820b32f7b" }}, "body": "win32: zlib: Fix buffer overflow on inflate (CVE-2022-37434)\n" , "diff": "diff --git a/win32port/zlib/inflate.c b/win32port/zlib/inflate.c\nindex 664c4b9..21631c7 100644\n--- a/win32port/zlib/inflate.c\n+++ b/win32port/zlib/inflate.c\n@@ -720,8 +720,9 @@ int flush;\n if (copy \u003e have) copy \u003d have;\r\n if (copy) {\r\n if (state-\u003ehead !\u003d Z_NULL \u0026\u0026\r\n- state-\u003ehead-\u003eextra !\u003d Z_NULL) {\r\n- len \u003d state-\u003ehead-\u003eextra_len - state-\u003elength;\r\n+ state-\u003ehead-\u003eextra !\u003d Z_NULL \u0026\u0026\r\n+ (len \u003d state-\u003ehead-\u003eextra_len - state-\u003elength) \u003c\r\n+ state-\u003ehead-\u003eextra_max) {\r\n zmemcpy(state-\u003ehead-\u003eextra + len, next,\r\n len + copy \u003e state-\u003ehead-\u003eextra_max ?\r\n state-\u003ehead-\u003eextra_max - len : copy);\r\n","s":{"c":1750825485,"u": 2871}} ],"g": 4236,"chitpc": 0,"ehitpc": 0,"indexed":0 , "ab": 0, "si": 0, "db":0, "di":0, "sat":0, "lfc": "0000"}