From 589b0691e59f761ccb05ddb8e1124991440db2c7 Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Thu, 14 Nov 2024 09:57:08 +1100 Subject: [PATCH] prevent information leak off the stack prevent leak of uninitialised stack data in hash_search CVE: CVE-2024-12085 Upstream-Status: Backport [https://git.samba.org/?p=rsync.git;a=commit;h=589b0691e59f761ccb05ddb8e1124991440db2c7] Signed-off-by: Archana Polampalli --- match.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/match.c b/match.c index 36e78ed2..dfd6af2c 100644 --- a/match.c +++ b/match.c @@ -147,6 +147,9 @@ static void hash_search(int f,struct sum_struct *s, int more; schar *map; + // prevent possible memory leaks + memset(sum2, 0, sizeof sum2); + /* want_i is used to encourage adjacent matches, allowing the RLL * coding of the output to work more efficiently. */ want_i = 0; -- 2.40.0