diff options
| author |   Phillip Lougher <phillip@lougher.demon.co.uk> | 2009-09-23 15:57:37 -0700 |
|---|---|---|
| committer |   Linus Torvalds <torvalds@linux-foundation.org> | 2009-09-24 07:21:05 -0700 |
| commit | 6a8811629e9aa611aa710162f9e02020bba52c87 (patch) | |
| tree | d3b8ff16950f5cda94b3259fbfa097aea9cb1e5f /arch/x86/mm/fault.c | |
| parent | drivers/vlynq/vlynq.c: fix resource size off by 1 error (diff) | |
| download | linux-dev-6a8811629e9aa611aa710162f9e02020bba52c87.tar.xz linux-dev-6a8811629e9aa611aa710162f9e02020bba52c87.zip | |
lzma/gzip: fix potential oops when input data is truncated
If the lzma/gzip decompressors are called with insufficient input data
(len > 0 & fill = NULL), they will attempt to call the fill function to
obtain more data, leading to a kernel oops.
Signed-off-by: Phillip Lougher <phillip@lougher.demon.co.uk>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'arch/x86/mm/fault.c')
0 files changed, 0 insertions, 0 deletions