From b5be9e6c5f9feba4cf55feba83cee86039a37cea Mon Sep 17 00:00:00 2001 From: Wayne Davison Date: Thu, 7 Jul 2005 21:14:29 +0000 Subject: [PATCH] Fix latest zlib security exploit (CAN-2005-2096). --- zlib/inftrees.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zlib/inftrees.c b/zlib/inftrees.c index 8a896b28..509461d9 100644 --- a/zlib/inftrees.c +++ b/zlib/inftrees.c @@ -134,7 +134,7 @@ unsigned short FAR *work; left -= count[len]; if (left < 0) return -1; /* over-subscribed */ } - if (left > 0 && (type == CODES || (codes - count[0] != 1))) + if (left > 0 && (type == CODES || max != 1)) return -1; /* incomplete set */ /* generate offsets into symbol table for each length for sorting */ -- 2.34.1