On Tue, Dec 02, 2014 at 01:17:29PM -0700, Simon Glass wrote:

> Commit 4d3b8a0d fixed a problem with lzma decompress where it would
> run out of bytes to decompress. The algorithm needs to know how many
> uncompressed bytes it is expected to produce.
> 
> However, the fix introduced a potential buffer overrun, and causes
> the compression test to fail (test_compression command in sandbox).
> 
> The correct fix seems to be to use the minimum of the expected number
> of uncompressed bytes and the amount of output space available. That
> way things work normally when there is enough space, and return an
> error (without overrunning available space) when there is not.
> 
> Signed-off-by: Antonios Vamporakis <a...@area128.com>
> CC: Kees Cook <keesc...@chromium.org>
> CC: Simon Glass <s...@chromium.org>
> CC: Daniel Schwierzeck <daniel.schwierz...@gmail.com>
> CC: Luka Perkov <l...@openwrt.org>
> 
> Signed-off-by: Simon Glass <s...@chromium.org>

Applied to u-boot/master, thanks!

-- 
Tom

Attachment: signature.asc
Description: Digital signature

_______________________________________________
U-Boot mailing list
U-Boot@lists.denx.de
http://lists.denx.de/mailman/listinfo/u-boot

Reply via email to