[PATCH] lib/inflate: fix memory leak in inflate_dynamic() on inflate_codes() failure
From: Josh Law
Date: Fri Mar 06 2026 - 11:24:11 EST
When inflate_codes() fails in inflate_dynamic(), the code jumps to the
'out' label which only frees 'll', leaking the Huffman tables 'tl' and
'td'. Restructure the code so that the decoding tables are always freed
before reaching the 'out' label.
Signed-off-by: Josh Law <objecting@xxxxxxxxxxxxx>
---
lib/inflate.c | 7 +++----
1 file changed, 3 insertions(+), 4 deletions(-)
diff --git a/lib/inflate.c b/lib/inflate.c
index 5b1e70d0ce8c..ae704e4f64ec 100644
--- a/lib/inflate.c
+++ b/lib/inflate.c
@@ -1009,10 +1009,10 @@ DEBG("dyn5d ");
DEBG("dyn6 ");
/* decompress until an end-of-block code */
- if (inflate_codes(tl, td, bl, bd)) {
+ if (inflate_codes(tl, td, bl, bd))
ret = 1;
- goto out;
- }
+ else
+ ret = 0;
DEBG("dyn7 ");
@@ -1021,7 +1021,6 @@ DEBG("dyn7 ");
huft_free(td);
DEBG(">");
- ret = 0;
out:
free(ll);
return ret;
--
2.43.0