Potential Vulnerability in Cloned Code

[tabudz]

Summary

Our tool detected a potential vulnerability in Src/SLib/szlib.c which was cloned from madler/zlib but did not receive the security patch applied in madler/zlib. The original issue was reported and fixed under https://nvd.nist.gov/vuln/detail/CVE-2018-25032.

Proposed Fix

Apply the same patch as the one in madler/zlib to eliminate the vulnerability.

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-25032
madler/zlib@5c44459