From: Ian Campbell <Ian.Campbell@citrix.com>
To: Yann Collet <yann.collet.73@gmail.com>
Cc: xen-devel <xen-devel@lists.xenproject.org>,
Keir Fraser <keir@xen.org>,
Ian Jackson <Ian.Jackson@eu.citrix.com>,
Jan Beulich <JBeulich@suse.com>
Subject: Re: [PATCH v2] libxc: add LZ4 decompression support
Date: Wed, 25 Sep 2013 08:37:18 +0100 [thread overview]
Message-ID: <1380094638.30708.62.camel@dagon.hellion.org.uk> (raw)
In-Reply-To: <CADv+DG=iut7_D=WMQ7Cr_GEq2bTE8yC0Ux-aYu1kqb5rBLMUJw@mail.gmail.com>
On Tue, 2013-09-24 at 21:55 +0200, Yann Collet wrote:
> Consequently, a compressed-block of size 0 is not supposed to exist
> (break format).
Unfortunately an attacker is free to break the format. The question is
what will the decoder do when faced with such invalid inputs?
It seems like such concerns were not considered at all during
implementation? (which is fair enough, since the data stream is
implicitly trusted in the original target use case)
Ian.
next prev parent reply other threads:[~2013-09-25 7:37 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-09-23 14:51 [PATCH 0/2] add LZ4 kernel decompression support Jan Beulich
2013-09-23 14:54 ` [PATCH 1/2] xen: add LZ4 " Jan Beulich
2013-09-23 15:00 ` Ian Campbell
2013-09-23 15:10 ` Jan Beulich
2013-09-23 14:56 ` [PATCH 2/2] libxc: " Jan Beulich
2013-09-23 15:00 ` Ian Campbell
2013-09-23 15:22 ` Jan Beulich
2013-09-24 9:34 ` Ian Campbell
2013-09-24 9:49 ` Jan Beulich
2013-09-24 10:01 ` Ian Campbell
2013-09-24 10:17 ` Jan Beulich
2013-09-24 10:18 ` Ian Campbell
2013-09-24 10:05 ` Ian Campbell
2013-09-24 15:02 ` Jan Beulich
2013-09-24 16:29 ` [PATCH v2] " Jan Beulich
2013-09-24 16:53 ` Ian Campbell
2013-09-24 19:55 ` Yann Collet
2013-09-25 7:37 ` Ian Campbell [this message]
2013-09-25 8:06 ` Yann Collet
2013-09-25 8:36 ` Jan Beulich
2013-09-25 7:23 ` Jan Beulich
2013-09-25 7:35 ` Ian Campbell
2013-09-30 11:40 ` [PATCH v3 0/2] add LZ4 kernel " Jan Beulich
2013-09-30 11:44 ` [PATCH v3 1/2] xen: add LZ4 " Jan Beulich
2013-09-30 11:45 ` [PATCH v3 2/2] libxc: " Jan Beulich
2013-10-04 11:16 ` Ian Campbell
2013-10-04 14:19 ` Jan Beulich
2013-10-04 14:30 ` Ian Campbell
2013-09-30 12:10 ` [PATCH v3 0/2] add LZ4 kernel " Keir Fraser
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1380094638.30708.62.camel@dagon.hellion.org.uk \
--to=ian.campbell@citrix.com \
--cc=Ian.Jackson@eu.citrix.com \
--cc=JBeulich@suse.com \
--cc=keir@xen.org \
--cc=xen-devel@lists.xenproject.org \
--cc=yann.collet.73@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).