Fix of MSZIP signature parsing

Fixes #1174

diff --git a/libarchive/archive_read_support_format_cab.c b/libarchive/archive_read_support_format_cab.c
index e5ff5a12cd9b4ba285acdecc8acc78613bdae294..a6475308e016d3b67811bdb3c8f63a6d6b68d36e 100644 (file)
--- a/libarchive/archive_read_support_format_cab.c
+++ b/libarchive/archive_read_support_format_cab.c
@@ -1509,8 +1509,8 @@ cab_read_ahead_cfdata_deflate(struct archive_read *a, ssize_t *avail)
                        }
                        if (mszip == 1 && cab->stream.next_in[0] != 0x4b)
                                goto nomszip;
-                       else if (cab->stream.next_in[0] != 0x43 ||
-                           cab->stream.next_in[1] != 0x4b)
+                       else if (mszip == 2 && (cab->stream.next_in[0] != 0x43 ||
+                           cab->stream.next_in[1] != 0x4b))
                                goto nomszip;
                        cab->stream.next_in += mszip;
                        cab->stream.avail_in -= mszip;