The gentoo security guys found another way to segfault busybox's decompression

code: we can do a null dereference if one of our huffman tables has all zero
length codes.  This fixes it.  (Thanks solar.)


git-svn-id: svn://busybox.net/trunk/busybox@14137 69ca8d6d-28ef-0310-b511-8ec308f3f277

1 files changed, 1 insertions, 1 deletions

diff --git a/archival/libunarchive/decompress_unzip.c b/archival/libunarchive/decompress_unzip.c
index 1b82542fe..ea8169592 100644
--- a/archival/libunarchive/decompress_unzip.c
+++ b/archival/libunarchive/decompress_unzip.c
@@ -271,7 +271,7 @@ int huft_build(unsigned int *b, const unsigned int n,
         if (c[0] == n) { /* null input--all zero length codes */
                 *t = (huft_t *) NULL;
                 *m = 0;
-                return 0;
+                return 2;
         }
 
         /* Find minimum and maximum length, bound *m by those */