A SEGV signal occurred when running xar.

[swtkiwi]

A SEGV signal occurred when running xar.

ASAN:SIGSEGV
=================================================================
==25776==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000008 (pc 0x00000042b2f0 bp 0x7ffe4b2e3210 sp 0x7ffe4b2e3190 T0)
    #0 0x42b2ef in xar_unserialize lib/archive.c:1767
    #1 0x41dc7f in xar_open lib/archive.c:340
    #2 0x410717 in list src/xar.c:1493
    #3 0x41a9d5 in main src/xar.c:2667
    #4 0x7fc972a2582f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #5 0x404838 in _start (/home/sandy/swt_fuzz/xar/xar/src/xar+0x404838)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV lib/archive.c:1767 xar_unserialize
==25776==ABORTING

The input file has been put at:
https://github.com/fCorleone/fuzz_programs/blob/master/xar/test2.dms

[abergmann]

CVE-2018-17094 was assigned to this issue.