commit 5a3f81a7029daff5f08aad146f4c4510e790da49
author Lasse Collin <lasse.collin@tukaani.org> Wed Jan 12 17:01:21 2011 -0800
committer Linus Torvalds <torvalds@linux-foundation.org> Thu Jan 13 08:03:24 2011 -0800
tree 08f0dfe372ebb5db518de2e80c4fb1d7c81f70be
parent 8f9b54a35a70b604ebd2b2f2e7e04eabd0ff8a54

Decompressors: check input size in decompress_unlzo.c

The code assumes that the input is valid and not truncated.  Add checks to
avoid reading past the end of the input buffer.  Change the type of "skip"
from u8 to int to fix a possible integer overflow.

Signed-off-by: Lasse Collin <lasse.collin@tukaani.org>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Alain Knaff <alain@knaff.lu>
Cc: Albin Tonnerre <albin.tonnerre@free-electrons.com>
Cc: Phillip Lougher <phillip@lougher.demon.co.uk>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>