@@ -1,3 +1,7 @@

+Sun May 28 00:42:05 CEST 2006 (acab)

+------------------------------------

+  * libclamav/upx.c: Fixed upx bug in find_ep reported by Sven

+

 Sat May 27 15:37:51 BST 2006 (njh)

 ----------------------------------

   * libclamav:	Some debugging messages didn't print new lines, reported by Sven

@@ -216,7 +216,7 @@ static int upx_find_ep(char *src, uint32_t ssize, uint32_t upx1, uint32_t ep)

     /* Verify decompressor length. Avoid crashing on multiple 

      * compressed files. exe packed by UPX and PEC. */

-    if (!CLI_ISCONTAINED(src, ssize, src + ep - upx1, len))

+    if (!CLI_ISCONTAINED(src, ssize, src + ep - upx1 + 0xc0, len))

 	return -1;

     /* Shift to decompressor start */