[Patch] NULL pointer deref with corrupted squashfs image

Phillip Lougher phillip at lougher.demon.co.uk
Wed Jan 21 23:31:38 EST 2009


Eric Sesterhenn wrote:

> Some callers of zlib_inflate() might accidentally pass a NULL
> pointer in strm->next_out which zlib_inflate() should catch.
> Others like the powerpc gunzip_partial expect to be able
> to extract a zImage to memory location 0. This introduces
> zlib_inflate_usafe() for those and adds a check for the rest
> 
> 
> +    These two wrappers decide wheter strm->next_out gets checked for NULL.

"wheter" -> "whether"

Apart from that looks OK to me.

Phillip




More information about the Linuxppc-dev mailing list