mirror of
https://github.com/GerbilSoft/zlib-ng.git
synced 2025-06-18 11:35:35 -04:00
![]() CVE-2004-0797[0] occured when an error was detected but no action was taken --- that is, execution was allowed to continue. One of the tests for CVE-2005-2096 actually hit the code path that was fixed in the patch for CVE-2004-0797. This occured because all the fuzzing was done on zlib 1.2.1, and zlib 1.2.2 fixed this bug but not the 2005 CVEs. It was detected by running the test cases against zlib 1.2.2. The relevant bits of the zlib 1.2.2 patch are [1] and [2]. [0] http://www.kb.cert.org/vuls/id/238678 [1] |
||
---|---|---|
.. | ||
test.gz |