[rpms/bzip3] epel8: Fix decompressing large incompressible streams

[rpms/bzip3] epel8: Fix decompressing large incompressible streams

[@ 2026-09-08 9:11 UTC (permalink / raw)]

A new commit has been pushed.

Repo   : rpms/bzip3
Branch : epel8
Commit : 3129babc0e7304f06838bc66b66711430f77b0cb
Author : Petr Písař <ppisar@redhat.com>
Date   : 2026-09-08T11:10:46+02:00
Stats  : +32/-1 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/bzip3/c/3129babc0e7304f06838bc66b66711430f77b0cb?branch=epel8

Log:
Fix decompressing large incompressible streams

---
diff --git a/bzip3-1.5.3-fix-174.patch b/bzip3-1.5.3-fix-174.patch
new file mode 100644
index 0000000..d5f870d
--- /dev/null
+++ b/bzip3-1.5.3-fix-174.patch
@@ -0,0 +1,25 @@
+From b9aacb60d124f28f8ca1866005afb06357b2d3c2 Mon Sep 17 00:00:00 2001
+From: Kamila Szewczyk <27734421+iczelia@users.noreply.github.com>
+Date: Sun, 14 Jun 2026 09:52:18 +0200
+Subject: [PATCH] fix #174
+
+---
+ src/libbz3.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/libbz3.c b/src/libbz3.c
+index edba06c..3818c65 100644
+--- a/src/libbz3.c
++++ b/src/libbz3.c
+@@ -963,7 +963,7 @@ BZIP3_API int bz3_decompress(const uint8_t * in, uint8_t * out, size_t in_size,
+             return BZ3_ERR_MALFORMED_HEADER;
+         }
+         s32 size = read_neutral_s32(in);
+-        if (size < 0 || size > block_size) goto malformed_header;
++        if (size < 0 || size > (s32)bz3_bound(block_size)) goto malformed_header;
+         if (in_size < size + 8) {
+             bz3_free(state);
+             free(compression_buf);
+-- 
+2.55.0
+

diff --git a/bzip3.spec b/bzip3.spec
index 3ae0a2c..895f74d 100644
--- a/bzip3.spec
+++ b/bzip3.spec
@@ -1,6 +1,6 @@
 Name:           bzip3
 Version:        1.3.1
-Release:        4%{?dist}
+Release:        5%{?dist}
 Summary:        Tools for compressing and decompressing bzip3 files
 # bz3grep:                  BSD-2-Clause
 # include/common.h:         LGPL-3.0-or-later
@@ -59,6 +59,9 @@ Patch6:         bzip3-1.5.1-bz3_compress-better-bound-estimation.patch
 # Fix a memory leak in bz3_decompress(), in upstream after 1.5.1,
 # <https://github.com/kspalaiologos/bzip3/pull/159>
 Patch7:         bzip3-1.4.0-Fix-memory-leak-by-compression_buf-in-bz3_decompress.patch
+# Fix decompressing large incompressible streams, in upstream after 1.5.3,
+# <https://github.com/iczelia/bzip3/issues/174>
+Patch8:         bzip3-1.5.3-fix-174.patch
 BuildRequires:  autoconf
 BuildRequires:  autoconf-archive
 BuildRequires:  automake
@@ -180,6 +183,9 @@ fi
 %{_libdir}/pkgconfig/bzip3.pc
 
 %changelog
+* Tue Sep 08 2026 Petr Pisar <ppisar@redhat.com> - 1.3.1-5
+- Fix decompressing large incompressible streams (upstream GH#174)
+
 * Wed Apr 30 2025 Petr Pisar <ppisar@redhat.com> - 1.3.1-4
 - Improve memory estimation in bz3_compress()
 - Fix a memory leak in bz3_decompress() (upstream bug #159)