Dan McDonald
ee4712284c
Illumos #4936 fix potential overflow in lz4
...
4936 lz4 could theoretically overflow a pointer with a certain input
Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com>
Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com>
Approved by: Gordon Ross <gordon.ross@nexenta.com>
Ported by: Tim Chase <tim@chase2k.com>
References:
https://illumos.org/issues/4936
https://github.com/illumos/illumos-gate/commit/58d0718
Porting notes:
This fixes the widely-reported "20-year-old vulnerability" in
LZO/LZ4 implementations which inherited said bug from the reference
implementation.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Tim Chase <tim@chase2k.com>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #2429
2014-07-01 14:10:47 -07:00
..
2014-05-01 12:08:53 -07:00
2013-09-04 16:01:24 -07:00
2013-10-31 14:57:51 -07:00
2013-11-05 13:18:26 -08:00
2013-12-18 16:46:35 -08:00
2014-05-05 13:56:59 -07:00
2013-12-18 16:46:35 -08:00
2014-01-07 10:33:11 -08:00
2013-10-31 14:58:04 -07:00
2013-10-31 14:58:04 -07:00
2013-12-18 16:46:35 -08:00
2013-12-18 16:46:35 -08:00
2014-01-29 15:50:49 -08:00
2014-03-04 12:22:24 -08:00
2014-01-23 12:56:33 -08:00
2014-04-10 14:28:51 -07:00
2013-11-04 10:55:25 -08:00
2014-05-22 10:39:52 -07:00
2014-03-04 11:50:13 -08:00
2013-01-08 10:35:43 -08:00
2013-12-18 16:46:35 -08:00
2013-12-18 16:46:35 -08:00
2014-03-04 12:22:24 -08:00
2013-12-18 16:46:35 -08:00
2014-05-06 10:41:46 -07:00
2014-02-21 12:10:40 -08:00
2014-03-07 10:01:36 -08:00
2013-12-02 14:02:46 -08:00
2014-03-31 16:10:57 -07:00
2013-12-18 16:46:35 -08:00
2014-07-01 14:10:47 -07:00
2013-12-18 16:46:35 -08:00
2013-10-25 13:59:40 -07:00
2014-05-06 10:41:17 -07:00
2013-09-04 16:01:24 -07:00
2013-09-25 15:44:22 -07:00
2014-05-19 11:55:50 -07:00
2014-03-20 12:05:30 -07:00
2013-11-04 10:55:25 -08:00
2013-12-18 16:46:35 -08:00
2014-05-14 16:20:21 -07:00
2014-03-04 12:22:24 -08:00
2014-04-16 10:59:24 -07:00
2013-09-04 16:01:24 -07:00
2014-04-14 13:27:56 -07:00
2013-10-31 14:58:04 -07:00
2012-08-27 12:01:37 -07:00
2014-04-14 13:27:56 -07:00
2014-04-25 15:41:19 -07:00
2014-05-19 13:30:48 -07:00
2013-12-18 16:46:35 -08:00
2013-12-06 09:32:43 -08:00
2013-10-31 14:58:04 -07:00
2013-12-18 16:46:35 -08:00
2013-12-06 09:32:43 -08:00
2013-10-31 14:58:04 -07:00
2013-12-06 09:32:43 -08:00
2013-10-31 14:58:04 -07:00
2013-12-18 16:46:35 -08:00
2013-11-04 10:55:25 -08:00
2013-01-29 09:28:20 -08:00
2014-03-04 11:44:44 -08:00
2014-01-23 11:07:29 -08:00
2013-12-18 16:46:35 -08:00
2013-12-18 16:46:35 -08:00
2013-12-06 09:30:51 -08:00
2014-04-02 13:10:08 -07:00
2013-10-30 14:51:27 -07:00
2014-05-19 11:45:11 -07:00
2013-11-23 15:08:29 -08:00
2013-10-31 14:58:04 -07:00
2013-10-31 14:58:04 -07:00
2013-12-18 16:46:35 -08:00
2013-12-18 16:46:35 -08:00
2014-02-12 09:38:28 -08:00
2014-01-09 15:50:23 -08:00
2014-05-01 10:11:18 -07:00
2013-12-18 16:46:35 -08:00
2013-10-31 14:58:04 -07:00
2013-10-31 14:58:04 -07:00
2014-04-14 13:27:56 -07:00
2014-06-11 16:32:57 -07:00
2013-12-18 16:46:35 -08:00
2013-12-18 16:46:35 -08:00
2014-05-01 10:11:18 -07:00
2013-12-18 16:46:35 -08:00
2014-02-21 16:10:49 -08:00
2014-04-10 14:27:03 -07:00
2014-01-14 14:46:12 -08:00