natas_hw
/
OSM-binary
mirror of https://github.com/openstreetmap/OSM-binary
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #95 from simon04/fix-94 

Fix BSS buffer overflow in osmpbf-outline zlib decompression
This commit is contained in:
Jochen Topf 2026-07-24 14:51:08 +02:00 committed by GitHub
parent 28f76c6bf0 8857d08d80
commit 9eddf3d1f8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
tools/osmpbf-outline.cpp
View File

@ -232,6 +232,12 @@ int main(int argc, char *argv[]) {
debug(" contains zlib-compressed data: %u bytes", sz); debug(" contains zlib-compressed data: %u bytes", sz);
debug(" uncompressed size: %u bytes", blob.raw_size()); debug(" uncompressed size: %u bytes", blob.raw_size());
// ensure the raw_size fits into the unpack_buffer, otherwise
// zlib would inflate past the end of the fixed-size buffer
if (blob.raw_size() < 0 || blob.raw_size() > OSMPBF::max_uncompressed_blob_size) {
err(" raw_size is bigger then allowed (%d > %u)", blob.raw_size(), OSMPBF::max_uncompressed_blob_size);
}
// zlib information // zlib information
z_stream z; z_stream z;