patches/busybox/1.20.2/busybox-1.20.2-bunzip2.patch


1
2
3
4
5
6
7
8
9
10
11
12

diff -uNr busybox-1.20.2.orig/archival/libarchive/decompress_bunzip2.c busybox-1.20.2/archival/libarchive/decompress_bunzip2.c
--- busybox-1.20.2.orig/archival/libarchive/decompress_bunzip2.c	2014-01-20 11:16:01.817359481 +0100
+++ busybox-1.20.2/archival/libarchive/decompress_bunzip2.c	2014-01-20 11:16:47.492875819 +0100
@@ -440,7 +440,7 @@
 		   literal used is the one at the head of the mtfSymbol array.) */
 		if (runPos != 0) {
 			uint8_t tmp_byte;
-			if (dbufCount + runCnt >= dbufSize) return RETVAL_DATA_ERROR;
+			if (dbufCount + runCnt > dbufSize) return RETVAL_DATA_ERROR;
 			tmp_byte = symToByte[mtfSymbol[0]];
 			byteCount[tmp_byte] += runCnt;
 			while (--runCnt >= 0) dbuf[dbufCount++] = (uint32_t)tmp_byte;