Compression routine reads past the end of the array

azyx3 / lz4

Automatically exported from code.google.com/p/lz4

0 stars 0 forks source link

Compression routine reads past the end of the array #11

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago

Hello,

It appears that there is an issue with the compression routine reading past the 
end of the array for certain inputs.

Please see the attached fuzz test. It will crash on the second iteration.

Original issue reported on code.google.com by fech...@gmail.com on 29 Feb 2012 at 1:26

Attachments:

LZ4_FuzzTest_02_28_2012.zip

GoogleCodeExporter commented 9 years ago

Thanks for reporting. I will look into the issue.

Original comment by yann.col...@gmail.com on 29 Feb 2012 at 11:51

Changed state: Accepted

GoogleCodeExporter commented 9 years ago

The version used in this test is too old.
By updating lz4.c & lz4.h to latest available version (currently r57), problem 
disappears.

I guess you probably downloaded the older version by using the "download 
package" option. Unfortunately, Google Code is not able to automatically update 
such package currently.

In order to avoid future issue, i will remove the link from the download page.

Original comment by yann.col...@gmail.com on 29 Feb 2012 at 12:29

GoogleCodeExporter commented 9 years ago

Original comment by yann.col...@gmail.com on 29 Feb 2012 at 12:36

Changed state: Fixed

GoogleCodeExporter commented 9 years ago

You're right, thanks! The latest version appears to work perfectly.

Original comment by fech...@gmail.com on 29 Feb 2012 at 2:21