mirror of
https://github.com/git/git
synced 2024-08-27 11:39:22 +00:00
fix >4GiB source delta assertion failure
When people try insane things such as delta-compressing 4GiB files, they get this assertion: diff-delta.c:285: create_delta_index: Assertion `packed_entry - (struct index_entry *)mem == entries' failed. This happens because: 1) the 'entries' variable is an unsigned int 2) it is assigned with entries = (bufsize - 1) / RABIN_WINDOW (that itself is not a problem unless bufsize > 4G * RABIN_WINDOW) 3) the buffer is indexed from top to bottom starting at "data = buffer + entries * RABIN_WINDOW" and the multiplication here does indeed overflows, making the resulting top of the buffer much lower than expected. This makes the number of actually produced index entries smaller than what was computed initially, hence the assertion. Furthermore, the current delta encoding format cannot represent offsets into a reference buffer with more than 32 bits anyway. So let's just limit the number of entries to what the delta format can encode. Reported-by: Ilari Liusvaara <ilari.liusvaara@elisanet.fi> Signed-off-by: Nicolas Pitre <nico@fluxnic.net> Signed-off-by: Junio C Hamano <gitster@pobox.com>
This commit is contained in:
parent
0eb032d86c
commit
506049c7df
|
@ -147,6 +147,13 @@ struct delta_index * create_delta_index(const void *buf, unsigned long bufsize)
|
||||||
first byte to allow for optimizing the Rabin's polynomial
|
first byte to allow for optimizing the Rabin's polynomial
|
||||||
initialization in create_delta(). */
|
initialization in create_delta(). */
|
||||||
entries = (bufsize - 1) / RABIN_WINDOW;
|
entries = (bufsize - 1) / RABIN_WINDOW;
|
||||||
|
if (bufsize >= 0xffffffffUL) {
|
||||||
|
/*
|
||||||
|
* Current delta format can't encode offsets into
|
||||||
|
* reference buffer with more than 32 bits.
|
||||||
|
*/
|
||||||
|
entries = 0xfffffffeU / RABIN_WINDOW;
|
||||||
|
}
|
||||||
hsize = entries / 4;
|
hsize = entries / 4;
|
||||||
for (i = 4; (1u << i) < hsize && i < 31; i++);
|
for (i = 4; (1u << i) < hsize && i < 31; i++);
|
||||||
hsize = 1 << i;
|
hsize = 1 << i;
|
||||||
|
|
Loading…
Reference in a new issue