X-Git-Url: http://plrg.eecs.uci.edu/git/?a=blobdiff_plain;f=lib%2Fdecompress_bunzip2.c;h=f504027d66a8b1e8469daaba016c53559383333e;hb=cbc7aedfc21c6f60abc74a85bc42331ee1975bb2;hp=31c5f7675fbfa270a70a005247c8a3773067f5c0;hpb=939ddcfa60dabfaed390987bf0103a6654c0fe30;p=firefly-linux-kernel-4.4.55.git diff --git a/lib/decompress_bunzip2.c b/lib/decompress_bunzip2.c index 31c5f7675fbf..f504027d66a8 100644 --- a/lib/decompress_bunzip2.c +++ b/lib/decompress_bunzip2.c @@ -184,7 +184,7 @@ static int INIT get_next_block(struct bunzip_data *bd) if (get_bits(bd, 1)) return RETVAL_OBSOLETE_INPUT; origPtr = get_bits(bd, 24); - if (origPtr > dbufSize) + if (origPtr >= dbufSize) return RETVAL_DATA_ERROR; /* mapping table: if some byte values are never used (encoding things like ascii text), the compression code removes the gaps to have fewer