diff options
| author | Christian Franke <nobody@nowhere.ws> | 2019-10-17 15:12:05 +0200 |
|---|---|---|
| committer | Daniel Golle <daniel@makrotopia.org> | 2019-10-18 13:39:34 +0200 |
| commit | d544bc84a07f299ac1e513715301cae5fbd30923 (patch) | |
| tree | 74fae3ca7ef94cb9673ed13e1ac4b5b0ac85aa81 /package/kernel/lantiq | |
| parent | 07b5c59232d56320580c738afc57637328cb0608 (diff) | |
| download | upstream-d544bc84a07f299ac1e513715301cae5fbd30923.tar.gz upstream-d544bc84a07f299ac1e513715301cae5fbd30923.tar.bz2 upstream-d544bc84a07f299ac1e513715301cae5fbd30923.zip | |
lantiq: Fix fw_cutter LzmaWrapper
The destination buffer size `d_len` is passed to `lzma_inflate` as a
pointer. Therefore, it needs to be dereferenced to compare its content.
Signed-off-by: Christian Franke <nobody@nowhere.ws>
Diffstat (limited to 'package/kernel/lantiq')
| -rw-r--r-- | package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c b/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c index 7dce05666c..89662b9a5f 100644 --- a/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c +++ b/package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c @@ -153,7 +153,7 @@ int lzma_inflate(unsigned char *source, int s_len, unsigned char *dest, int *d_l outStream = 0; else { - if (outSizeFull > d_len) + if (outSizeFull > *d_len) outStream = 0; else outStream = dest; |