inftrees.c was subtracting an offset from a pointer to an array, in order to provide a pointer that allowed indexing starting at the offset. This is not compliant with the C standard, for which the behavior of a pointer decremented before its allocated memory is undefined. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9841