diff options
| author | Treehugger Robot <treehugger-gerrit@google.com> | 2019-03-29 22:15:49 +0000 |
|---|---|---|
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2019-03-29 22:15:49 +0000 |
| commit | d8e8ba4d7b0a5360321afa94638cd82cf1d316ca (patch) | |
| tree | 752e8abb4031b24d3656e3fec6469439d6c17671 | |
| parent | 956e233d9ab49cbf45602abaf654342cdfb4d33d (diff) | |
| parent | 7861376124e26e837e1037c1f2aa05e7de9b9d6d (diff) | |
| download | bzip2-oreo-mr1-iot-release.tar.gz | |
Merge "Check for upper bounds of nselectors."android-q-preview-6android-q-preview-5android-q-preview-4android-q-preview-2.5android-o-mr1-iot-release-1.0.12oreo-mr1-iot-release
| -rw-r--r-- | decompress.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/decompress.c b/decompress.c index 311f566..391552d 100644 --- a/decompress.c +++ b/decompress.c @@ -288,6 +288,7 @@ Int32 BZ2_decompress ( DState* s ) if (nGroups < 2 || nGroups > 6) RETURN(BZ_DATA_ERROR); GET_BITS(BZ_X_SELECTOR_2, nSelectors, 15); if (nSelectors < 1) RETURN(BZ_DATA_ERROR); + if (nSelectors > BZ_MAX_SELECTORS) RETURN(BZ_DATA_ERROR); for (i = 0; i < nSelectors; i++) { j = 0; while (True) { |