tree 314b8d6997e96a2e682e87c3bd04c352876dd2f1
parent c4f00f4995b6e461b48a37bf17b43315c242b45f
author Giovanni <561184+wargio@users.noreply.github.com> 1631310816 +0200
committer GitHub <noreply@github.com> 1631310816 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJhO9PgCRBK7hj4Ov3rIwAA1foIAGRdpZjQmPIJSptag9Eh4QEH
 xmj26QWyRsCFS32t1JJiVmgzC5m4iewzRsb5M9TWdq1VneYkpf165zZgt5DAy6MT
 +RBi0J2ymw8TrSOMStnnyPOwcM1OK+g9rIFz+5qgnPjKG9iMkVZUo6DTJqUtaSCQ
 HNL0I4dTlIq7NXtTgIz8/2Zw3UvH2Ol7Fjrgstv0SqwK1KF1rgQZk0ANVDPF8T1/
 YXj3XueJLhFuUY4IJ/4sQz9GLWs7m/G3xIDQHdcLJk0t76btUrNgUwIHIunvHV9a
 fx/M6SWLKbV06oUhpeXFOXqqi0ZkZdgGqJOZjeVOO254OGfXCOuc/UcZb3i3gy8=
 =GoC2
 -----END PGP SIGNATURE-----
 

Use after free when fseeko fails

In _zip_stdio_op_create_temp_output_cloning when fseeko fails the temp
value gets freed but then the freed pointer is assigned to ctx->tmpname.