[U-Boot] [PATCH 4/6] lzma: correctly bounds-check output buffer

Simon Glass sjg at chromium.org
Wed Aug 14 19:43:58 CEST 2013


On Mon, Aug 12, 2013 at 5:02 PM, Kees Cook <keescook at chromium.org> wrote:
> The output buffer size must be correctly passed to the lzma decoder or
> there is a risk of overflowing memory during decompression. Switching
> to the LZMA_FINISH_END mode means nothing is left in an unknown state
> once the buffer becomes full.
>
> Signed-off-by: Kees Cook <keescook at chromium.org>

Acked-by: Simon Glass <sjg at chromium.org>


More information about the U-Boot mailing list