unzip/trunk/unzip-6.0_CVE-2021-4217.patch

   1 diff --git a/process.c b/process.c
   2 index d2a846e..cba2463 100644
   3 --- a/process.c
   4 +++ b/process.c
   5 @@ -2064,10 +2064,14 @@ int getUnicodeData(__G__ ef_buf, ef_len)
   6            G.unipath_checksum = makelong(offset + ef_buf);
   7            offset += 4;
   8
   9 +          if (!G.filename_full) {
  10 +            /* Check if we have a unicode extra section but no filename set */
  11 +            return PK_ERR;
  12 +          }
  13 +
  14            /*
  15             * Compute 32-bit crc
  16             */
  17 -
  18            chksum = crc32(chksum, (uch *)(G.filename_full),
  19                           strlen(G.filename_full));