Bug 258009 - DoS vulnerablity. r=tor, sr=dveditz

git-svn-id: svn://10.0.0.236/trunk@162610 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/modules/zlib/src/ChangeLog.moz

@@ -4,6 +4,7 @@
 Mozilla.org changes:
 - 17 June 2004
   Sync'd with 1.2.1 release
+  see bug #226733
 
 - 17 June 2004
   Add mozzconf.h
@@ -16,3 +17,7 @@ Mozilla.org changes:
 
 - 25 June 2004
   define NO_vsnprintf for VMS in zutil.h
+
+- 21 September 2004
+  applied patch for DoS vulnerabililty in inflate.c
+  see bug #258009

mozilla/modules/zlib/src/inflate.c

@@ -861,6 +861,9 @@ int flush;
                 }
             }
 
+            /* handle error breaks in while */
+            if (state->mode == BAD) break;
+
             /* build code tables */
             state->next = state->codes;
             state->lencode = (code const FAR *)(state->next);