diff options
| author | Amin Hassani <ahassani@chromium.org> | 2019-03-29 16:25:33 -0700 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2019-03-29 16:25:33 -0700 |
| commit | 4dda28e9be640645a65915e04ba43817c36afcad (patch) | |
| tree | 752e8abb4031b24d3656e3fec6469439d6c17671 | |
| parent | 76a72eaa29bd962535ca233c5705739038eb4dab (diff) | |
| parent | 15d352377b39bba76d47d8c038bcaf38dfc2216c (diff) | |
| download | bzip2-4dda28e9be640645a65915e04ba43817c36afcad.tar.gz | |
Merge "Check for upper bounds of nselectors." am: d8e8ba4d7b
am: 15d352377b
Change-Id: I4a334fd3c282262c21851d263d4df94e02b38142
| -rw-r--r-- | decompress.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/decompress.c b/decompress.c index 311f566..391552d 100644 --- a/decompress.c +++ b/decompress.c @@ -288,6 +288,7 @@ Int32 BZ2_decompress ( DState* s ) if (nGroups < 2 || nGroups > 6) RETURN(BZ_DATA_ERROR); GET_BITS(BZ_X_SELECTOR_2, nSelectors, 15); if (nSelectors < 1) RETURN(BZ_DATA_ERROR); + if (nSelectors > BZ_MAX_SELECTORS) RETURN(BZ_DATA_ERROR); for (i = 0; i < nSelectors; i++) { j = 0; while (True) { |