Merge branch 'jt/pack-header-lshift-overflow'
* jt/pack-header-lshift-overflow: packfile: fix off-by-one error in decoding logicmaint
commit
c9c082850d
|
|
@ -1069,7 +1069,7 @@ unsigned long unpack_object_header_buffer(const unsigned char *buf,
|
||||||
size = c & 15;
|
size = c & 15;
|
||||||
shift = 4;
|
shift = 4;
|
||||||
while (c & 0x80) {
|
while (c & 0x80) {
|
||||||
if (len <= used || (bitsizeof(long) - 7) <= shift) {
|
if (len <= used || (bitsizeof(long) - 7) < shift) {
|
||||||
error("bad object header");
|
error("bad object header");
|
||||||
size = used = 0;
|
size = used = 0;
|
||||||
break;
|
break;
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue