fix(deps/zlib): CVE-2022-37434: Potential Vulnerability in Cloned Function (#21599)
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 madler/zlib@eff308a
This commit is contained in:
parent
5ec85e527a
commit
0b24431768
1 changed files with 3 additions and 2 deletions
5
deps/zlib/inflate.c
vendored
5
deps/zlib/inflate.c
vendored
|
|
@ -763,9 +763,10 @@ int flush;
|
|||
copy = state->length;
|
||||
if (copy > have) copy = have;
|
||||
if (copy) {
|
||||
len = state->head->extra_len - state->length;
|
||||
if (state->head != Z_NULL &&
|
||||
state->head->extra != Z_NULL) {
|
||||
len = state->head->extra_len - state->length;
|
||||
state->head->extra != Z_NULL &&
|
||||
len < state->head->extra_max) {
|
||||
zmemcpy(state->head->extra + len, next,
|
||||
len + copy > state->head->extra_max ?
|
||||
state->head->extra_max - len : copy);
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue