From f5c1a886b7ae20da7eafb77926252eb521260728 Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Thu, 28 Jan 2021 16:26:45 +0100 Subject: [PATCH] decompress_iob(): Fix detection of insufficient data Instead of checking the size of the iob we have to check the size of the actual data. Previously Privoxy could try to work on uninitialized data. --- parsers.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/parsers.c b/parsers.c index 14aa99ea..3b195300 100644 --- a/parsers.c +++ b/parsers.c @@ -540,7 +540,7 @@ jb_err decompress_iob(struct client_state *csp) cur = csp->iob->cur; - if (bufsize < (size_t)10) + if (old_size < (size_t)10) { /* * This is to protect the parsing of gzipped data, -- 2.39.2