diff options
| author | Thiago Macieira <thiago.macieira@intel.com> | 2022-08-30 11:32:18 -0300 |
|---|---|---|
| committer | Thiago Macieira <thiago.macieira@intel.com> | 2022-08-31 02:07:56 -0300 |
| commit | 9a43d9e559ffe1ca39f6354a7c331ab42c533db0 (patch) | |
| tree | 036eeadebe4d89cb738d97dbdf9c66835c90f3ae /src/3rdparty/zlib/src/inflate.c | |
| parent | 2af64c4577e42fecfeab9611c15fa8526bb09988 (diff) | |
3rdparty/zlib: backport the fix to CVE-2022-37434
Qt isn't known to be affected by this.
Change-Id: Ic6547f8247454b47baa8fffd171025f5a435a209
Reviewed-by: Volker Hilsheimer <volker.hilsheimer@qt.io>
Diffstat (limited to 'src/3rdparty/zlib/src/inflate.c')
| -rw-r--r-- | src/3rdparty/zlib/src/inflate.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/src/3rdparty/zlib/src/inflate.c b/src/3rdparty/zlib/src/inflate.c index 7be8c63662..7a72897492 100644 --- a/src/3rdparty/zlib/src/inflate.c +++ b/src/3rdparty/zlib/src/inflate.c @@ -763,9 +763,10 @@ int flush; copy = state->length; if (copy > have) copy = have; if (copy) { + len = state->head->extra_len - state->length; if (state->head != Z_NULL && - state->head->extra != Z_NULL) { - len = state->head->extra_len - state->length; + state->head->extra != Z_NULL && + len < state->head->extra_max) { zmemcpy(state->head->extra + len, next, len + copy > state->head->extra_max ? state->head->extra_max - len : copy); |