]> git.ipfire.org Git - thirdparty/zlib-ng.git/commit
Assure that inflatePrime() can't shift a 32-bit integer by 32 bits.
authorMark Adler <madler@alumni.caltech.edu>
Fri, 17 Feb 2023 08:06:32 +0000 (00:06 -0800)
committerHans Kristian Rosbach <hk-git@circlestorm.org>
Wed, 26 Apr 2023 12:01:14 +0000 (14:01 +0200)
commit045a278d86ffaeb455682618e2bc208059b72f5d
tree13b6295f824b77a897a3a153aab6e5a0605d931d
parent3f06cece6be2e1bfe7b60d17e5ef823535ec9d0c
Assure that inflatePrime() can't shift a 32-bit integer by 32 bits.

The inflate() functions never leave state->bits greater than 24, so
an inflatePrime() call could not cause this. The only way this
could have happened would be by using inflatePrime() to fill the
bit buffer with 32 bits, and then calling inflatePrime() a *second*
time asking to insert zero bits, for some reason. This commit
assures that a shift by 32 bits does not occur even in that case.
inflate.c