git.ipfire.org Git - thirdparty/zstd.git/commit

]> git.ipfire.org Git - thirdparty/zstd.git/commit

projects / thirdparty / zstd.git / commit

author	Nick Terrell <terrelln@fb.com>
	Tue, 18 Oct 2016 23:08:52 +0000 (16:08 -0700)
committer	Nick Terrell <terrelln@fb.com>
	Tue, 18 Oct 2016 23:41:33 +0000 (16:41 -0700)
commit	bb68062c590dbd46905907dd2a63a658040a79d4
tree	5f85fd7ff4fb3973c7e9a6077dd4af76c62c5fd6	tree \| snapshot
parent	7b06ad7a05eabf1e03a9eeff4d6fea7fe63eb0f1	commit \| diff

Unitialized memory read in ZSTD_decodeSeqHeaders()

Caused by two things:
1. Not checking that `ip` is in range except for the first byte.
2. `ZSTDv0{5,6}_decodeLiteralsBlock()` could return a value larger than `srcSize`.

lib/decompress/zstd_decompress.c		diff \| blob \| blame \| history
lib/legacy/zstd_v01.c		diff \| blob \| blame \| history
lib/legacy/zstd_v05.c		diff \| blob \| blame \| history
lib/legacy/zstd_v06.c		diff \| blob \| blame \| history
lib/legacy/zstd_v07.c		diff \| blob \| blame \| history

Mirror of https://github.com/facebook/zstd.git

RSS Atom