ckolivas/lrzip
1
0
Fork 0
mirror of https://github.com/ckolivas/lrzip.git synced 2026-02-14 03:14:14 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Prevent attempted left shift of negative value of possibly maliciously crafted file.

Browse source
This commit is contained in:
ckolivas 2026-02-12 19:25:08 +11:00
parent 21d97a3b6c
commit 43d2f3dc70
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
libzpaq/libzpaq.cpp
View file

@ -800,8 +800,11 @@ void Predictor::init() {
cr.ht.resize(64, cp[1]);
cr.cm.resize(512);
for (int j=0; j<256; ++j) {
int stretched;
cr.cm[j*2]=1<<15;
cr.cm[j*2+1]=clamp512k(stretch(st.cminit(j)>>8)<<10);
stretched = stretch(st.cminit(j)>>8);
if (stretched < 10) error("negative stretched value");
cr.cm[j*2+1]=clamp512k(stretched << 10);
}
break;
case SSE: // sizebits j start limit