From a7c525191aa725f4ebb7b489cdd7dd854a4e42fb Mon Sep 17 00:00:00 2001
From: Uwe Ohse <uwe@ohse.de>
Date: Sun, 1 Mar 2020 22:35:28 +0000
Subject: [PATCH] may-be-security-fix: avoid possible underflow

Fixes: CVE-2018-10195

[a.heider: mention CVE in commit message]
---
 src/zm.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

--- a/src/zm.c
+++ b/src/zm.c
@@ -432,10 +432,11 @@ zsdata(const char *buf, size_t length, i
 	VPRINTF(3,("zsdata: %lu %s", (unsigned long) length, 
 		Zendnames[(frameend-ZCRCE)&3]));
 	crc = 0;
-	do {
+	while (length>0) {
 		zsendline(*buf); crc = updcrc((0377 & *buf), crc);
 		buf++;
-	} while (--length>0);
+		length--;
+	}
 	xsendline(ZDLE); xsendline(frameend);
 	crc = updcrc(frameend, crc);