inflate_fast: sout is already a short so ptr arith was off by one.
[safe/jmp/linux-2.6] / lib / zlib_inflate / inffast.c
index fa62fc7..2c13ecc 100644 (file)
@@ -286,7 +286,7 @@ void inflate_fast(z_streamp strm, unsigned start)
                    } else { /* dist == 1 or dist == 2 */
                        unsigned short pat16;
 
-                       pat16 = *(sout-2+2*OFF);
+                       pat16 = *(sout-1+OFF);
                        if (dist == 1) {
                                union uu mm;
                                /* copy one char pattern to both bytes */