# HG changeset patch # User reimar # Date 1239997795 0 # Node ID cb387dff812d70ce776d05f40c8c762c01ba95dc # Parent 2c6a58787aeb505bcca771e6df7459e82fb043c1 Change buffer check to avoid an unlikely pointer arithmetic overflow. diff -r 2c6a58787aeb -r cb387dff812d xan.c --- a/xan.c Fri Apr 17 19:48:54 2009 +0000 +++ b/xan.c Fri Apr 17 19:49:55 2009 +0000 @@ -104,7 +104,7 @@ val = src[val - 0x17 + get_bits1(&gb) * byte]; if ( val < 0x16 ) { - if (dest + 1 > dest_end) + if (dest >= dest_end) return 0; *dest++ = val; val = ival;