The gentoo security guys found another way to segfault busybox's decompression
code: we can do a null dereference if one of our huffman tables has all zero length codes. This fixes it. (Thanks solar.)
This commit is contained in:
parent
dce17c6268
commit
eb00afb2d5
@ -271,7 +271,7 @@ int huft_build(unsigned int *b, const unsigned int n,
|
||||
if (c[0] == n) { /* null input--all zero length codes */
|
||||
*t = (huft_t *) NULL;
|
||||
*m = 0;
|
||||
return 0;
|
||||
return 2;
|
||||
}
|
||||
|
||||
/* Find minimum and maximum length, bound *m by those */
|
||||
|
Loading…
Reference in New Issue
Block a user