Subject: bug#33501: Malformed inputs triggering uninitialized memory use in inflate_dynamic()

From: Hanno Böck <[email-masked]>
Date: Fri, 30 Nov 2018 15:28:01 +0100

On Wed, 28 Nov 2018 21:09:45 +0000
"Adler, Mark" <[email-masked]> wrote:

> However I don’t have a memory sanitizer, so please verify. Thanks.

It's fixed with this patch.

(Also memory sanitizer is just a clang feature. While it's a bit
trickier to use in complex applications due to dependencies, for a
simple tool like gzip which only depends on libc it works pretty
straightforward.)

-- 
Hanno Böck
https://hboeck.de/

mail/jabber: [email-masked]
GPG: FE73757FA60E4E21B937579FA5880072BBB51E42