From e79c42d854657ae7f75613bd80c1a35ff7c525cb Mon Sep 17 00:00:00 2001 From: Lasse Collin Date: Fri, 10 Apr 2009 11:17:02 +0300 Subject: [PATCH] Fix off-by-one in LZ decoder. Fortunately, this bug had no security risk other than accepting some corrupt files as valid. --- src/liblzma/lz/lz_decoder.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/liblzma/lz/lz_decoder.h b/src/liblzma/lz/lz_decoder.h index 9041d0bd..79b8c8c5 100644 --- a/src/liblzma/lz/lz_decoder.h +++ b/src/liblzma/lz/lz_decoder.h @@ -126,7 +126,7 @@ dict_is_empty(const lzma_dict *const dict) static inline bool dict_is_distance_valid(const lzma_dict *const dict, const size_t distance) { - return dict->full >= distance; + return dict->full > distance; }