lzx_compress: fix corruption with long literal run

[wimlib] / src / lzx_compress.c

diff --git a/src/lzx_compress.c b/src/lzx_compress.c
index ca25d92f2ae9e35416765577e59e5726bbf201c5..b4930ee0df7c4ac16c2a371e086b264fe55b0427 100644 (file)
--- a/src/lzx_compress.c
+++ b/src/lzx_compress.c
@@ -266,11 +266,11 @@ struct lzx_sequence {
        /* The number of literals in the run.  This may be 0.  The literals are
         * not stored explicitly in this structure; instead, they are read
         * directly from the uncompressed data.  */
-       u16 litrunlen;
+       u32 litrunlen : 24;
 
        /* If the next field doesn't indicate end-of-block, then this is the
         * match length minus LZX_MIN_MATCH_LEN.  */
-       u16 adjusted_length;
+       u32 adjusted_length : 8;
 
        /* If bit 31 is clear, then this field contains the match header in bits
         * 0-8, and either the match offset plus LZX_OFFSET_ADJUSTMENT or a