diff options
| author | Lasse Collin <lasse.collin@tukaani.org> | 2011-01-12 17:01:21 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2011-01-13 08:03:24 -0800 |
| commit | 5a3f81a7029daff5f08aad146f4c4510e790da49 (patch) | |
| tree | 08f0dfe372ebb5db518de2e80c4fb1d7c81f70be /lib/xz/xz_dec_bcj.c | |
| parent | 8f9b54a35a70b604ebd2b2f2e7e04eabd0ff8a54 (diff) | |
| download | linux-5a3f81a7029daff5f08aad146f4c4510e790da49.tar.bz2 | |
Decompressors: check input size in decompress_unlzo.c
The code assumes that the input is valid and not truncated. Add checks to
avoid reading past the end of the input buffer. Change the type of "skip"
from u8 to int to fix a possible integer overflow.
Signed-off-by: Lasse Collin <lasse.collin@tukaani.org>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Alain Knaff <alain@knaff.lu>
Cc: Albin Tonnerre <albin.tonnerre@free-electrons.com>
Cc: Phillip Lougher <phillip@lougher.demon.co.uk>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'lib/xz/xz_dec_bcj.c')
0 files changed, 0 insertions, 0 deletions