RepoMirrors/openwrt
1
0
Fork 0
mirror of git://git.openwrt.org/openwrt/openwrt.git synced 2025-02-14 18:47:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

lantiq: Fix fw_cutter LzmaWrapper

Browse Source 
The destination buffer size `d_len` is passed to `lzma_inflate` as a
pointer. Therefore, it needs to be dereferenced to compare its content.

Signed-off-by: Christian Franke <nobody@nowhere.ws>
(cherry picked from commit d544bc84a07f299ac1e513715301cae5fbd30923)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Christian Franke 2019-10-17 15:12:05 +02:00 committed by Daniel Golle
parent c987955f82
commit 3468a4435a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/kernel/lantiq/ltq-vdsl-fw/src/LzmaWrapper.c
View File

@ -153,7 +153,7 @@ int lzma_inflate(unsigned char *source, int s_len, unsigned char *dest, int *d_l
outStream = 0;
else
{
if (outSizeFull > d_len)
if (outSizeFull > *d_len)
outStream = 0;
else
outStream = dest;