]> git.ipfire.org Git - thirdparty/zstd.git/commit
projects / thirdparty / zstd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6d5e0f1) | patch
Fix assert in ZSTD_safecopy 1856/head
authorNick Terrell <terrelln@fb.com>
Tue, 29 Oct 2019 00:51:17 +0000 (17:51 -0700)
committerNick Terrell <terrelln@fb.com>
Tue, 29 Oct 2019 00:51:17 +0000 (17:51 -0700)
commit9c1860861ef15891f60510f9d4c3d6a75da2e12f
treefdff182e1dd5a0b3e469fa9b916278cad175f34etree
parent6d5e0f1c9f57dd74edc5ccb4a96c0bbb5de96f7dcommit | diff
Fix assert in ZSTD_safecopy

In the case that `op >= oend_w` it is possible that `diff < 8` because
the two buffers could be adjacent.

Credit to OSS-Fuzz, which found the bug. It isn't reproducible because
it depends on the memory layout.
lib/decompress/zstd_decompress_block.c diff | blob | blame | history
Mirror of https://github.com/facebook/zstd.git