miniz_tinfl.c: apply CVE-2018-12913 fix from mainstream.

Orig. P/R: richgel999/miniz#329.
sezero · Dec 29, 2024 · d76c4cd · d76c4cd
1 parent 929a534
commit d76c4cd
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/miniz_tinfl.c b/src/miniz_tinfl.c
@@ -498,6 +498,12 @@ tinfl_status tinfl_decompress(tinfl_decompressor *r, const mz_uint8 *pIn_buf_nex
                         bit_buf >>= code_len;
                         num_bits -= code_len;
 
+                        /* assert(sym2 != 0 && counter != 0); */
+                        if (sym2 == 0 && counter == 0)
+                        {
+                            TINFL_CR_RETURN_FOREVER(40, TINFL_STATUS_FAILED);
+                        }
+
                         pOut_buf_cur[0] = (mz_uint8)counter;
                         if (sym2 & 256)
                         {