alexk / rpms / rpm

Forked from rpms/rpm 2 years ago
Clone
1090e7
From 0964912b94f9f48a0a812fbfbb2f996dbd93eff0 Mon Sep 17 00:00:00 2001
1090e7
From: Jonathan Wakely <github@kayari.org>
1090e7
Date: Wed, 25 May 2016 12:31:19 +0100
1090e7
Subject: [PATCH] Fix off-by-one error
1090e7
1090e7
There's an off-by-one error in base64_decode_value which results in undefined behaviour:
1090e7
1090e7
    void* out;
1090e7
    size_t len;
1090e7
    rpmBase64Decode("\x7b", &out, &len;;
1090e7
---
1090e7
 rpmio/base64.c | 2 +-
1090e7
 1 file changed, 1 insertion(+), 1 deletion(-)
1090e7
1090e7
diff --git a/rpmio/base64.c b/rpmio/base64.c
1090e7
index 60e67d4..4424aab 100644
1090e7
--- a/rpmio/base64.c
1090e7
+++ b/rpmio/base64.c
1090e7
@@ -104,7 +104,7 @@ static int base64_decode_value(unsigned char value_in)
1090e7
 {
1090e7
 	static const int decoding[] = {62,-1,-1,-1,63,52,53,54,55,56,57,58,59,60,61,-1,-1,-1,-2,-1,-1,-1,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,-1,-1,-1,-1,-1,-1,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51};
1090e7
 	value_in -= 43;
1090e7
-	if (value_in > sizeof(decoding)/sizeof(int))
1090e7
+	if (value_in >= sizeof(decoding)/sizeof(int))
1090e7
 		return -1;
1090e7
 	return decoding[value_in];
1090e7
 }
1090e7
-- 
1090e7
2.9.3
1090e7