Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
Merge tag 'compress-3.16-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
Pull compress bugfix from Greg KH:
"Here is another lz4 bugfix for 3.16-rc3 that resolves a reported issue
with that compression algorithm"
* tag 'compress-3.16-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:
lz4: fix another possible overrun
+3
-1
+3
-1
lib/lz4/lz4_decompress.c
+3
-1
lib/lz4/lz4_decompress.c
···
108
108
if (length == ML_MASK) {
109
109
for (; *ip == 255; length += 255)
110
110
ip++;
111
+
if (unlikely(length > (size_t)(length + *ip)))
112
+
goto _output_error;
111
113
length += *ip++;
112
114
}
113
115
···
159
157
160
158
/* write overflow error detected */
161
159
_output_error:
162
-
return (int) (-(((char *)ip) - source));
160
+
return -1;
163
161
}
164
162
165
163
static int lz4_uncompress_unknownoutputsize(const char *source, char *dest,