mirrors/git
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'jt/pack-header-lshift-overflow'

Browse Source 
* jt/pack-header-lshift-overflow:
  packfile: fix off-by-one error in decoding logic
This commit is contained in:
Junio C Hamano
2022-01-12 15:11:41 -08:00
parent 4e2e2a4ffe a5c97b0164
commit c9c082850d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packfile.c
View File

@ -1069,7 +1069,7 @@ unsigned long unpack_object_header_buffer(const unsigned char *buf,
size = c & 15; size = c & 15;
shift = 4; shift = 4;
while (c & 0x80) { while (c & 0x80) {
if (len <= used || (bitsizeof(long) - 7) <= shift) { if (len <= used || (bitsizeof(long) - 7) < shift) {
error("bad object header"); error("bad object header");
size = used = 0; size = used = 0;
break; break;