lzma: correctly bounds-check output buffer
authorKees Cook <keescook@chromium.org>
Fri, 16 Aug 2013 14:59:14 +0000 (07:59 -0700)
committerSimon Glass <sjg@chromium.org>
Tue, 3 Sep 2013 19:30:21 +0000 (13:30 -0600)
commitafca294289949b118a192b77be947379734ea620
treed1f02ebb7651ce6172eb58d03521fb60fbb66cb8
parentb75650d84d4b7892179ae183523011f6d898423d
lzma: correctly bounds-check output buffer

The output buffer size must be correctly passed to the lzma decoder or
there is a risk of overflowing memory during decompression. Switching
to the LZMA_FINISH_END mode means nothing is left in an unknown state
once the buffer becomes full.

Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Simon Glass <sjg@chromium.org>
lib/lzma/LzmaTools.c