X-Git-Url: https://asedeno.scripts.mit.edu/gitweb/?a=blobdiff_plain;f=builtin-unpack-objects.c;h=47ed610677fe47f855beaac02f40fa84d132455e;hb=6e13921b4f7adcc7316a76c0c4955b85b1589a65;hp=9f4bdd3296d19b75211ca0f2434d227eafac44b6;hpb=f6576f4c0c6fa3b2d979faf28936c09480dedaab;p=git.git

diff --git a/builtin-unpack-objects.c b/builtin-unpack-objects.c
index 9f4bdd329..47ed61067 100644
--- a/builtin-unpack-objects.c
+++ b/builtin-unpack-objects.c
@@ -370,6 +370,8 @@ static void unpack_delta_entry(enum object_type type, unsigned long delta_size,
 			base_offset = (base_offset << 7) + (c & 127);
 		}
 		base_offset = obj_list[nr].offset - base_offset;
+		if (base_offset <= 0 || base_offset >= obj_list[nr].offset)
+			die("offset value out of bound for delta base object");
 
 		delta_data = get_data(delta_size);
 		if (dry_run || !delta_data) {