diff options
| author | Christian Franke <nobody@nowhere.ws> | 2019-10-17 15:12:05 +0200 |
|---|---|---|
| committer | Daniel Golle <daniel@makrotopia.org> | 2019-10-18 13:45:23 +0200 |
| commit | 3468a4435a25268068b018e47c8da84d51440b5b (patch) | |
| tree | 4dc1431d4be55ef06135da43be9d875f47103a6a | |
| parent | c987955f8242fb742e88ad2e8eebeeba329c1b0f (diff) | |
| download | upstream-3468a4435a25268068b018e47c8da84d51440b5b.tar.gz upstream-3468a4435a25268068b018e47c8da84d51440b5b.tar.bz2 upstream-3468a4435a25268068b018e47c8da84d51440b5b.zip | |
lantiq: Fix fw_cutter LzmaWrapper
The destination buffer size `d_len` is passed to `lzma_inflate` as a
pointer. Therefore, it needs to be dereferenced to compare its content.
Signed-off-by: Christian Franke <nobody@nowhere.ws>
(cherry picked from commit d544bc84a07f299ac1e513715301cae5fbd30923)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| -rw-r--r-- | package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c b/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c index 7dce05666c..89662b9a5f 100644 --- a/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c +++ b/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c @@ -153,7 +153,7 @@ int lzma_inflate(unsigned char *source, int s_len, unsigned char *dest, int *d_l outStream = 0; else { - if (outSizeFull > d_len) + if (outSizeFull > *d_len) outStream = 0; else outStream = dest; |