From: Wayne Davison Date: Thu, 7 Jul 2005 21:14:29 +0000 (+0000) Subject: Fix latest zlib security exploit (CAN-2005-2096). X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/commitdiff_plain/b5be9e6c5f9feba4cf55feba83cee86039a37cea Fix latest zlib security exploit (CAN-2005-2096). --- diff --git a/zlib/inftrees.c b/zlib/inftrees.c index 8a896b28..509461d9 100644 --- a/zlib/inftrees.c +++ b/zlib/inftrees.c @@ -134,7 +134,7 @@ unsigned short FAR *work; left -= count[len]; if (left < 0) return -1; /* over-subscribed */ } - if (left > 0 && (type == CODES || (codes - count[0] != 1))) + if (left > 0 && (type == CODES || max != 1)) return -1; /* incomplete set */ /* generate offsets into symbol table for each length for sorting */