* grub-core/fs/btrfs.c (grub_btrfs_lzo_decompress): Fix offset when

	crossing page boundary.

diff --git a/ChangeLog b/ChangeLog
index c8f003edb1c1f9b15f9b94bd27729dc7340fdf2d..c379e47fe14113c9ae0b4c1410e4ff71cff90fe5 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2012-05-03  Vladimir Serbinenko  <phcoder@gmail.com>
+
+       * grub-core/fs/btrfs.c (grub_btrfs_lzo_decompress): Fix offset when
+       crossing page boundary.
+
 2012-05-03  Vladimir Serbinenko  <phcoder@gmail.com>
 
        Fix B-tree search in BFS, especially in presence of non-ASCII

diff --git a/grub-core/fs/btrfs.c b/grub-core/fs/btrfs.c
index 2f9ba627dcb2f57feda5217b7e63520470010e99..9e41fbb9fc5c84176f9357fac1b234cde77a2c89 100644 (file)
--- a/grub-core/fs/btrfs.c
+++ b/grub-core/fs/btrfs.c
@@ -913,8 +913,10 @@ static grub_ssize_t
 grub_btrfs_lzo_decompress(char *ibuf, grub_size_t isize, grub_off_t off,
                          char *obuf, grub_size_t osize)
 {
-  grub_uint32_t total_size, cblock_size, ret = 0;
+  grub_uint32_t total_size, cblock_size;
+  grub_size_t ret = 0;
   unsigned char buf[GRUB_BTRFS_LZO_BLOCK_SIZE];
+  char *ibuf0 = ibuf;
 
   total_size = grub_le_to_cpu32 (grub_get_unaligned32 (ibuf));
   ibuf += sizeof (total_size);
@@ -925,6 +927,10 @@ grub_btrfs_lzo_decompress(char *ibuf, grub_size_t isize, grub_off_t off,
   /* Jump forward to first block with requested data.  */
   while (off >= GRUB_BTRFS_LZO_BLOCK_SIZE)
     {
+      /* Don't let following uint32_t cross the page boundary.  */
+      if (((ibuf - ibuf0) & 0xffc) == 0xffc)
+       ibuf = ((ibuf - ibuf0 + 3) & ~3) + ibuf0;
+
       cblock_size = grub_le_to_cpu32 (grub_get_unaligned32 (ibuf));
       ibuf += sizeof (cblock_size);
 
@@ -939,6 +945,10 @@ grub_btrfs_lzo_decompress(char *ibuf, grub_size_t isize, grub_off_t off,
     {
       lzo_uint usize = GRUB_BTRFS_LZO_BLOCK_SIZE;
 
+      /* Don't let following uint32_t cross the page boundary.  */
+      if (((ibuf - ibuf0) & 0xffc) == 0xffc)
+       ibuf = ((ibuf - ibuf0 + 3) & ~3) + ibuf0;
+
       cblock_size = grub_le_to_cpu32 (grub_get_unaligned32 (ibuf));
       ibuf += sizeof (cblock_size);