Kees Cook afca294289 lzma: correctly bounds-check output buffer ...

The output buffer size must be correctly passed to the lzma decoder or
there is a risk of overflowing memory during decompression. Switching
to the LZMA_FINISH_END mode means nothing is left in an unknown state
once the buffer becomes full.

Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Simon Glass <sjg@chromium.org>

2013-09-03 13:30:21 -06:00

..

libfdt

libfdt: SPDX-License-Identifier: GPL-2.0+ BSD-2-Clause

2013-08-10 09:04:25 -04:00

lzma

lzma: correctly bounds-check output buffer

2013-09-03 13:30:21 -06:00

lzo

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

rsa

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

tizen

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

zlib

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

addr_map.c

lib/powerpc: addrmap_phys_to_virt() should return a pointer

2012-07-06 17:30:32 -05:00

aes.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

asm-offsets.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

bch.c

nand: Merge BCH code from Linux nand driver

2012-01-26 16:09:02 -06:00

bitrev.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

bzlib_crctable.c

Rename lib_generic/ to lib/

2010-04-13 09:13:04 +02:00

bzlib_decompress.c

Rename lib_generic/ to lib/

2010-04-13 09:13:04 +02:00

bzlib_huffman.c

Rename lib_generic/ to lib/

2010-04-13 09:13:04 +02:00

bzlib_private.h

Rename lib_generic/ to lib/

2010-04-13 09:13:04 +02:00

bzlib_randtable.c

Rename lib_generic/ to lib/

2010-04-13 09:13:04 +02:00

bzlib.c

Rename lib_generic/ to lib/

2010-04-13 09:13:04 +02:00

circbuf.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

crc7.c

lib: add crc7 from Linux

2011-01-18 23:38:08 +01:00

crc16.c

Add eCos-2.0 SPDX-License-Identifier to source files

2013-07-24 09:45:01 -04:00

crc32.c

crc32: Correct endianness of crc32 result

2013-04-19 10:24:14 -04:00

ctype.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

display_options.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

div64.c

Move arch/ppc to arch/powerpc

2010-04-21 23:42:38 +02:00

errno.c

Add basic errno support.

2010-09-19 19:29:47 +02:00

fdtdec_test.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

fdtdec.c

Merge branch 'master' of git://git.denx.de/u-boot-i2c

2013-07-24 09:50:24 -04:00

gunzip.c

gzip: correctly bounds-check output buffer

2013-09-03 13:30:14 -06:00

gzip.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

hang.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

hashtable.c

Add LGPL-2.1+ SPDX-License-Identifier to source files

2013-07-24 09:45:01 -04:00

initcall.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

ldiv.c

Add LGPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:45:01 -04:00

linux_string.c

Make linux kernel string funcs available to tools

2012-12-13 11:46:07 -07:00

lmb.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

Makefile

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

md5.c

GCC47: Fix warning in md5.c

2012-04-29 14:14:08 +02:00

net_utils.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

physmem.c

Introduce arch_phys_memset which works like memset but on physical memory

2012-12-06 14:30:40 -08:00

qsort.c

Include common.h in qsort.c to fix build warning

2011-12-07 08:39:54 +01:00

rand.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

rbtree.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

sha1.c

sha1: Use const where possible, and unsigned for input len

2012-12-11 13:17:33 -07:00

sha256.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

slre.c

Add SLRE - Super Light Regular Expression library

2013-05-01 16:24:00 -04:00

string.c

mtd: resync with Linux-3.7.1

2013-05-31 17:12:03 -05:00

strmhz.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

time.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

tpm.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

trace.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

uuid.c

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24 09:44:38 -04:00

vsprintf.c

Add function to print a number with grouped digits

2013-06-26 10:16:41 -04:00