diff options
| author | Kees Cook <keescook@chromium.org> | 2013-08-16 07:59:14 -0700 |
|---|---|---|
| committer | Simon Glass <sjg@chromium.org> | 2013-09-03 13:30:21 -0600 |
| commit | afca294289949b118a192b77be947379734ea620 (patch) | |
| tree | d1f02ebb7651ce6172eb58d03521fb60fbb66cb8 /lib/rand.c | |
| parent | b75650d84d4b7892179ae183523011f6d898423d (diff) | |
| download | u-boot-imx-afca294289949b118a192b77be947379734ea620.zip u-boot-imx-afca294289949b118a192b77be947379734ea620.tar.gz u-boot-imx-afca294289949b118a192b77be947379734ea620.tar.bz2 | |
lzma: correctly bounds-check output buffer
The output buffer size must be correctly passed to the lzma decoder or
there is a risk of overflowing memory during decompression. Switching
to the LZMA_FINISH_END mode means nothing is left in an unknown state
once the buffer becomes full.
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Simon Glass <sjg@chromium.org>
Diffstat (limited to 'lib/rand.c')
0 files changed, 0 insertions, 0 deletions