hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

lantiq: Fix fw_cutter LzmaWrapper 

The destination buffer size `d_len` is passed to `lzma_inflate` as a
pointer. Therefore, it needs to be dereferenced to compare its content.

Signed-off-by: Christian Franke <nobody@nowhere.ws>
(cherry picked from commit d544bc84a0)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
openwrt-19.07
Christian Franke 2019-10-17 15:12:05 +02:00 committed by Daniel Golle
parent c987955f82
commit 3468a4435a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c
View File

@ -153,7 +153,7 @@ int lzma_inflate(unsigned char *source, int s_len, unsigned char *dest, int *d_l
outStream = 0; outStream = 0;
else else
{ {
if (outSizeFull > d_len) if (outSizeFull > *d_len)
outStream = 0; outStream = 0;
else else
outStream = dest; outStream = dest;