gzip: correctly bounds-check output buffer
authorKees Cook <keescook@chromium.org>
Fri, 16 Aug 2013 14:59:13 +0000 (07:59 -0700)
committerSimon Glass <sjg@chromium.org>
Tue, 3 Sep 2013 19:30:14 +0000 (13:30 -0600)
commitb75650d84d4b7892179ae183523011f6d898423d
tree4c665df9b1200fa6c26908aaa7c72ab3c2347a28
parent8ef70478458432b5352980a823039c508359523e
gzip: correctly bounds-check output buffer

The output buffer size must not be reset by the gzip decoder or there
is a risk of overflowing memory during decompression.

Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Simon Glass <sjg@chromium.org>
lib/gunzip.c