From 54d908dc93dbbaacd15b8a53b29a8fb88b6c472c Mon Sep 17 00:00:00 2001 From: Geremy Condra Date: Thu, 29 Mar 2012 13:29:11 -0700 Subject: Fix for CVE-2011-3045 Change-Id: Ia46a262f8c73ec8ad6634c5de5f776373c330061 --- pngrutil.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pngrutil.c b/pngrutil.c index d67af58..31c9b01 100644 --- a/pngrutil.c +++ b/pngrutil.c @@ -264,8 +264,8 @@ png_inflate(png_structp png_ptr, const png_byte *data, png_size_t size, { if (output != 0 && output_size > count) { - int copy = output_size - count; - if (avail < copy) copy = avail; + png_size_t copy = output_size - count; + if ((png_size_t) avail < copy) copy = (png_size_t) avail; png_memcpy(output + count, png_ptr->zbuf, copy); } count += avail; -- cgit v1.1