From: Ondrej Dubaj <odubaj@redhat.com>
Date: Wed, 31 Mar 2021 09:50:44 +0000 (+0200)
Subject: Fixed double free when calling lzx_huffman_init frees pointer ds-
X-Git-Tag: v3.5.2~20^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=71d71269acf62f98c7f2d95203ed782ea876bdd9;p=thirdparty%2Flibarchive.git

Fixed double free when calling lzx_huffman_init frees pointer ds-
---

diff --git a/libarchive/archive_read_support_format_cab.c b/libarchive/archive_read_support_format_cab.c
index 43738b537..950f3d254 100644
--- a/libarchive/archive_read_support_format_cab.c
+++ b/libarchive/archive_read_support_format_cab.c
@@ -2110,7 +2110,6 @@ lzx_decode_init(struct lzx_stream *strm, int w_bits)
 		ds->pos_tbl = malloc(sizeof(ds->pos_tbl[0]) * w_slot);
 		if (ds->pos_tbl == NULL)
 			return (ARCHIVE_FATAL);
-		lzx_huffman_free(&(ds->mt));
 	}
 
 	for (footer = 0; footer < 18; footer++)