[U-Boot] [PATCH 4/6] lzma: correctly bounds-check output buffer

2013-08-16 Thread Kees Cook
The output buffer size must be correctly passed to the lzma decoder or there is a risk of overflowing memory during decompression. Switching to the LZMA_FINISH_END mode means nothing is left in an unknown state once the buffer becomes full. Signed-off-by: Kees Cook Acked-by: Simon Glass --- lib

Re: [U-Boot] [PATCH 4/6] lzma: correctly bounds-check output buffer

2013-08-14 Thread Simon Glass
On Mon, Aug 12, 2013 at 5:02 PM, Kees Cook wrote: > The output buffer size must be correctly passed to the lzma decoder or > there is a risk of overflowing memory during decompression. Switching > to the LZMA_FINISH_END mode means nothing is left in an unknown state > once the buffer becomes full.

[U-Boot] [PATCH 4/6] lzma: correctly bounds-check output buffer

2013-08-12 Thread Kees Cook
The output buffer size must be correctly passed to the lzma decoder or there is a risk of overflowing memory during decompression. Switching to the LZMA_FINISH_END mode means nothing is left in an unknown state once the buffer becomes full. Signed-off-by: Kees Cook --- lib/lzma/LzmaTools.c |