Lasse Collin 8cdab20660 lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
[ Upstream commit 83d3c4f22a36d005b55f44628f46cc0d319a75e8 ]

With valid files, the safety margin described in lib/decompress_unxz.c
ensures that these buffers cannot overlap. But if the uncompressed size
of the input is larger than the caller thought, which is possible when
the input file is invalid/corrupt, the buffers can overlap. Obviously
the result will then be garbage (and usually the decoder will return
an error too) but no other harm will happen when such an over-run occurs.

This change only affects uncompressed LZMA2 chunks and so this
should have no effect on performance.

Link: https://lore.kernel.org/r/20211010213145.17462-2-xiang@kernel.org
Signed-off-by: Lasse Collin <lasse.collin@tukaani.org>
Signed-off-by: Gao Xiang <hsiangkao@linux.alibaba.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-11-17 09:48:31 +01:00
..
2021-09-15 09:47:29 +02:00
2018-08-22 10:52:48 -07:00
2018-10-12 09:17:46 +02:00
2019-07-25 15:47:37 +02:00
2018-08-16 12:14:42 -07:00
2018-08-22 10:52:48 -07:00
2017-02-24 17:46:57 -08:00
2020-10-29 09:57:47 +01:00
2021-05-07 10:51:37 +02:00
2018-10-16 13:45:44 +02:00
2021-09-03 10:08:12 +02:00
2020-11-05 11:43:22 +01:00
2019-07-11 15:17:41 -07:00
2020-10-01 13:18:23 +02:00
2018-06-27 18:58:49 +03:00
2018-10-15 16:31:29 -04:00
2021-06-10 13:37:14 +02:00
2019-05-06 11:12:09 -07:00
2021-06-10 13:37:14 +02:00
2017-08-15 09:02:07 -07:00