]> git.proxmox.com Git - mirror_zfs.git/commit
Illumos #4936 fix potential overflow in lz4
authorDan McDonald <danmcd@omniti.com>
Tue, 24 Jun 2014 02:25:02 +0000 (22:25 -0400)
committerBrian Behlendorf <behlendorf1@llnl.gov>
Tue, 1 Jul 2014 21:10:47 +0000 (14:10 -0700)
commitee4712284cd6c0532b6fb78e23a3799f4ccdd675
tree6688b30a21e60a276ed1f6fd2968f6bc82d2564f
parent4240dc332d2ca41c31d95a81d9217c1b311666ff
Illumos #4936 fix potential overflow in lz4

4936 lz4 could theoretically overflow a pointer with a certain input
Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com>
Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com>
Approved by: Gordon Ross <gordon.ross@nexenta.com>
Ported by: Tim Chase <tim@chase2k.com>

References:
  https://illumos.org/issues/4936
  https://github.com/illumos/illumos-gate/commit/58d0718

Porting notes:

This fixes the widely-reported "20-year-old vulnerability" in
LZO/LZ4 implementations which inherited said bug from the reference
implementation.

Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Tim Chase <tim@chase2k.com>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #2429
module/zfs/lz4.c