Source: libb64
Version: 1.2-3
Tags: patch

As reported in <https://bugs.launchpad.net/bugs/1501176>, there's an off-by-one buffer over-read in base64_decode_value().

--
Jakub Wilk
--- a/src/cdecode.c
+++ b/src/cdecode.c
@@ -13,7 +13,7 @@
 	static const char decoding_size = sizeof(decoding);
 	if (value_in < 43) return -1;
 	value_in -= 43;
-	if (value_in > decoding_size) return -1;
+	if (value_in >= decoding_size) return -1;
 	return decoding[(int)value_in];
 }
 

Reply via email to