Fixed double free when calling lzx_huffman_init frees pointer ds-

diff --git a/libarchive/archive_read_support_format_cab.c b/libarchive/archive_read_support_format_cab.c
index 43738b53744dae30a3ad61638c5e5624db09ff08..950f3d254de6e928e9f8f41aaa1dca51727fead6 100644 (file)
--- a/libarchive/archive_read_support_format_cab.c
+++ b/libarchive/archive_read_support_format_cab.c
@@ -2110,7 +2110,6 @@ lzx_decode_init(struct lzx_stream *strm, int w_bits)
                ds->pos_tbl = malloc(sizeof(ds->pos_tbl[0]) * w_slot);
                if (ds->pos_tbl == NULL)
                        return (ARCHIVE_FATAL);
-               lzx_huffman_free(&(ds->mt));
        }
 
        for (footer = 0; footer < 18; footer++)