Re: [U-Boot] [PATCH 3/6] gzip: correctly bounds-check output buffer

2013-11-08 Thread Michal Simek
Hi Kees, On 08/16/2013 04:59 PM, Kees Cook wrote: The output buffer size must not be reset by the gzip decoder or there is a risk of overflowing memory during decompression. Signed-off-by: Kees Cook keesc...@chromium.org Acked-by: Simon Glass s...@chromium.org --- lib/gunzip.c |4

Re: [U-Boot] [PATCH 3/6] gzip: correctly bounds-check output buffer

2013-11-08 Thread Kees Cook
On Fri, Nov 8, 2013 at 4:04 AM, Michal Simek mon...@monstr.eu wrote: Hi Kees, On 08/16/2013 04:59 PM, Kees Cook wrote: The output buffer size must not be reset by the gzip decoder or there is a risk of overflowing memory during decompression. Signed-off-by: Kees Cook keesc...@chromium.org

Re: [U-Boot] [PATCH 3/6] gzip: correctly bounds-check output buffer

2013-11-08 Thread Michal Simek
On 11/08/2013 04:21 PM, Kees Cook wrote: On Fri, Nov 8, 2013 at 4:04 AM, Michal Simek mon...@monstr.eu wrote: Hi Kees, On 08/16/2013 04:59 PM, Kees Cook wrote: The output buffer size must not be reset by the gzip decoder or there is a risk of overflowing memory during decompression.

Re: [U-Boot] [PATCH 3/6] gzip: correctly bounds-check output buffer

2013-11-08 Thread Michal Simek
On 11/08/2013 04:40 PM, Michal Simek wrote: On 11/08/2013 04:21 PM, Kees Cook wrote: On Fri, Nov 8, 2013 at 4:04 AM, Michal Simek mon...@monstr.eu wrote: Hi Kees, On 08/16/2013 04:59 PM, Kees Cook wrote: The output buffer size must not be reset by the gzip decoder or there is a risk of

[U-Boot] [PATCH 3/6] gzip: correctly bounds-check output buffer

2013-08-16 Thread Kees Cook
The output buffer size must not be reset by the gzip decoder or there is a risk of overflowing memory during decompression. Signed-off-by: Kees Cook keesc...@chromium.org Acked-by: Simon Glass s...@chromium.org --- lib/gunzip.c |4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff

Re: [U-Boot] [PATCH 3/6] gzip: correctly bounds-check output buffer

2013-08-14 Thread Simon Glass
On Mon, Aug 12, 2013 at 5:02 PM, Kees Cook keesc...@chromium.org wrote: The output buffer size not be reset by the gzip decoder or there is a risk of overflowing memory during decompression. Signed-off-by: Kees Cook keesc...@chromium.org Looks right to me. Acked-by: Simon Glass

[U-Boot] [PATCH 3/6] gzip: correctly bounds-check output buffer

2013-08-12 Thread Kees Cook
The output buffer size not be reset by the gzip decoder or there is a risk of overflowing memory during decompression. Signed-off-by: Kees Cook keesc...@chromium.org --- lib/gunzip.c |4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/gunzip.c b/lib/gunzip.c index