c/zlib
1
0
Fork 0
mirror of https://github.com/madler/zlib synced 2025-03-28 21:13:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix pending buffer overflow assert with LIT_MEM allocation.

Browse Source 
Since each element in s->d_buf is 2 bytes, the sx index should be
multiplied by 2 in the assert.

Fixes #897
This commit is contained in:
Hans Wennborg 2023-12-15 15:10:19 +01:00 committed by Mark Adler
parent 4bd9a71f35
commit ee474ff2d1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
trees.c
View File

@ -938,7 +938,7 @@ local void compress_block(deflate_state *s, const ct_data *ltree,
/* Check for no overlay of pending_buf on needed symbols */
#ifdef LIT_MEM
Assert(s->pending < (s->lit_bufsize << 1) + sx, "pendingBuf overflow");
Assert(s->pending < 2 * (s->lit_bufsize + sx), "pendingBuf overflow");
#else
Assert(s->pending < s->lit_bufsize + sx, "pendingBuf overflow");
#endif