Re: [PATCH] Add missing bound checks for software 842 decompressor

On 19.08.20 22:19, Kees Cook wrote: On Sun, Aug 16, 2020 at 02:33:41AM +0200, Joan Bruguera wrote: Any feedback? Hi! I just happened to see this email. I think this should likely be directed to the crypto (which also handled compress/decompress APIs) list and the original author

Re: [PATCH] Add missing bound checks for software 842 decompressor

Any feedback? - Joan On 05.06.20 17:44, Joan Bruguera wrote: The software 842 decompressor receives, through the initial value of the 'olen' parameter, the capacity of the buffer pointed to by 'out'. If this capacity is insufficient to decode the compressed bitstream, -ENOSPC should

[PATCH] Add missing bound checks for software 842 decompressor

("Short data test", 12, 8); return -ECANCELED; // Do not leave this test module hanging around } void cleanup_module(void) { } MODULE_LICENSE("GPL"); MODULE_SOFTDEP("pre: 842"); Signed-off-by: Joan Bruguera --- lib/842/842_decompress.c | 6 ++ 1 file c