| commit | afca294289949b118a192b77be947379734ea620 | [log] [tgz] |
|---|---|---|
| author | Kees Cook <keescook@chromium.org> | Fri Aug 16 07:59:14 2013 -0700 |
| committer | Simon Glass <sjg@chromium.org> | Tue Sep 03 13:30:21 2013 -0600 |
| tree | d1f02ebb7651ce6172eb58d03521fb60fbb66cb8 | |
| parent | b75650d84d4b7892179ae183523011f6d898423d [diff] |
lzma: correctly bounds-check output buffer The output buffer size must be correctly passed to the lzma decoder or there is a risk of overflowing memory during decompression. Switching to the LZMA_FINISH_END mode means nothing is left in an unknown state once the buffer becomes full. Signed-off-by: Kees Cook <keescook@chromium.org> Acked-by: Simon Glass <sjg@chromium.org>