Bladeren bron

Fix undefined behavior/crash in GZipEncoder

When the output buffer is full, outbuf[produced] references past the buffer end, leading to UB and a possible assertion failure.
Fixes #1968, #1964
Nikita Ofitserov 3 jaren geleden
bovenliggende
commit
42038422f6
1 gewijzigde bestanden met toevoegingen van 1 en 1 verwijderingen
  1. 1 1
      src/GZipEncoder.cc

+ 1 - 1
src/GZipEncoder.cc

@@ -87,7 +87,7 @@ std::string GZipEncoder::encode(const unsigned char* in, size_t length,
       throw DL_ABORT_EX(fmt("libz::deflate() failed. cause:%s", strm_->msg));
     }
     size_t produced = outbuf.size() - strm_->avail_out;
-    out.append(&outbuf[0], &outbuf[produced]);
+    out.append(outbuf.data(), outbuf.data() + produced);
     if (strm_->avail_out > 0) {
       break;
     }