Commit b29bf711 authored by Richard Weinberger's avatar Richard Weinberger
Browse files

jffs2: Fix rtime decompressor 



The fix for a memory corruption contained a off-by-one error and
caused the compressor to fail in legit cases.

Cc: Kinsey Moore <kinsey.moore@oarcorp.com>
Cc: stable@vger.kernel.org
Fixes: fe051552 ("jffs2: Prevent rtime decompress memory corruption")
Signed-off-by: default avatarRichard Weinberger <richard@nod.at>
parent feffde68

fs/jffs2/compr_rtime.c

+1 −1
Original line number Diff line number Diff line
@@ -95,7 +95,7 @@ static int jffs2_rtime_decompress(unsigned char *data_in, 


		positions[value]=outpos;

		if (repeat) {

			if ((outpos + repeat) >= destlen) {

			if ((outpos + repeat) > destlen) {

				return 1;

			}

			if (backoffs + repeat >= outpos) {