generic-library/isa-l
1
0
Fork 0
mirror of https://github.com/intel/isa-l.git synced 2025-01-19 04:26:08 +01:00
Code Issues Projects Releases Wiki Activity

igzip: Fix bug in inflate when exactly one distance is coded

Browse Source 
Initialize the lookup table so invalid lookups do not cause segfaults.

Change-Id: Ibb88c4c473fa233f8821c35b3e32ff62814c2b15
Signed-off-by: Roy Oursler <roy.j.oursler@intel.com>
This commit is contained in:
Roy Oursler 2016-10-24 21:13:47 -04:00 committed by Greg Tucker
parent 3d66317189
commit 600d887143
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
igzip/igzip_fuzz_inflate.c
View File

@ -60,6 +60,8 @@ int main(int argc, char *argv[])
fread(in_buf, 1, in_file_size, in);
/* Inflate data with isal_inflate */
memset(state, 0xff, sizeof(struct inflate_state));
isal_inflate_init(state);
state->next_in = in_buf;
state->avail_in = in_file_size;

6
igzip/igzip_inflate.c
View File

@ -190,6 +190,9 @@ static void inline make_inflate_huff_code_large(struct inflate_huff_code_large *
last_length = huff_code_table[code_list[0]].length;
copy_size = (1 << last_length);
/* Initialize short_code_lookup, so invalid lookups process data */
memset(short_code_lookup, 0x1d, copy_size * sizeof(*short_code_lookup));
for (k = 0; k < code_list_len; k++) {
i = code_list[k];
if (huff_code_table[i].length > ISAL_DECODE_LONG_BITS)
@ -342,6 +345,9 @@ static void inline make_inflate_huff_code_small(struct inflate_huff_code_small *
last_length = huff_code_table[code_list[0]].length;
copy_size = (1 << last_length);
/* Initialize short_code_lookup, so invalid lookups process data */
memset(short_code_lookup, 0x1d, copy_size * sizeof(*short_code_lookup));
for (k = 0; k < code_list_len; k++) {
i = code_list[k];
if (huff_code_table[i].length > ISAL_DECODE_SHORT_BITS)