# HG changeset patch # User reimar # Date 1243765418 0 # Node ID d359d5ee74b93b16c34e50d720e2db69051076f9 # Parent 3242ae563430023e8875444fc55341554a898b8d Change buffer size checks to avoid the undefined overflow case. diff -r 3242ae563430 -r d359d5ee74b9 lcldec.c --- a/lcldec.c Sun May 31 10:16:28 2009 +0000 +++ b/lcldec.c Sun May 31 10:23:38 2009 +0000 @@ -87,7 +87,7 @@ continue; } if ((mask & (1 << (--maskbit))) == 0) { - if (destptr + 4 > destptr_end) + if (destptr_end - destptr < 4) break; memcpy(destptr, srcptr, 4); srclen -= 4; @@ -101,7 +101,7 @@ ofs &= 0x7ff; srclen -= 2; cnt *= 4; - if (destptr + cnt > destptr_end) { + if (destptr_end - destptr < cnt) { cnt = destptr_end - destptr; } for (; cnt > 0; cnt--) {