From 1c7cf90af4d81e609dcb6b0f9afa5787e2a8a344 Mon Sep 17 00:00:00 2001
From: Kenny Root <kroot@google.com>
Date: Wed, 11 Sep 2013 15:28:39 -0700
Subject: [PATCH] Fix another off-by-one error in ZipFileRO

Bug: 10424836
Change-Id: I491458bd31ef39e87127d061427b32a3d59ac807
---
 libs/androidfw/ZipFileRO.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libs/androidfw/ZipFileRO.cpp b/libs/androidfw/ZipFileRO.cpp
index 9aceaa950c004..ec5f95c8b4f75 100644
--- a/libs/androidfw/ZipFileRO.cpp
+++ b/libs/androidfw/ZipFileRO.cpp
@@ -645,7 +645,7 @@ bool ZipFileRO::getEntryInfo(ZipEntryRO entry, int* pMethod, size_t* pUncompLen,
 
         if (method == kCompressStored &&
             ((dataOffset >= cdOffset) ||
-             (uncompLen >= (cdOffset - dataOffset))))
+             (uncompLen > (cdOffset - dataOffset))))
         {
             ALOGE("ERROR: bad uncompressed length in zip (%ld + " ZD " > %ld)\n",
                 (long) dataOffset, (ZD_TYPE) uncompLen, (long) cdOffset);