ARCHIVE/xahaud
3
0
Fork 0
mirror of https://github.com/Xahau/xahaud.git synced 2025-12-06 17:27:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Detect CVE-2021-3520 when decompressing using LZ4

Browse Source
This commit is contained in:
Nik Bougalis
2021-12-20 10:40:10 -08:00
committed by Richard Holland
parent bc96da7c53
commit 3ee8a9c683
2 changed files with 39 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
src/ripple/basics/CompressionAlgorithms.h
View File

@@ -65,26 +65,33 @@ lz4Compress(void const* in, std::size_t inSize, BufferFactory&& bf)
/**
* @param in Compressed data
* @param inSize Size of compressed data
* @param inSizeUnchecked Size of compressed data
* @param decompressed Buffer to hold decompressed data
* @param decompressedSize Size of the decompressed buffer
* @param decompressedSizeUnchecked Size of the decompressed buffer
* @return size of the decompressed data
*/
inline std::size_t
lz4Decompress(
std::uint8_t const* in,
std::size_t inSize,
std::size_t inSizeUnchecked,
std::uint8_t* decompressed,
std::size_t decompressedSize)
std::size_t decompressedSizeUnchecked)
{
auto ret = LZ4_decompress_safe(
reinterpret_cast<const char*>(in),
reinterpret_cast<char*>(decompressed),
inSize,
decompressedSize);
int const inSize = static_cast<int>(inSizeUnchecked);
int const decompressedSize = static_cast<int>(decompressedSizeUnchecked);
if (ret <= 0 || ret != decompressedSize)
Throw<std::runtime_error>("lz4 decompress: failed");
if (inSize <= 0)
Throw<std::runtime_error>("lz4Decompress: integer overflow (input)");
if (decompressedSize <= 0)
Throw<std::runtime_error>("lz4Decompress: integer overflow (output)");
if (LZ4_decompress_safe(
reinterpret_cast<const char*>(in),
reinterpret_cast<char*>(decompressed),
inSize,
decompressedSize) != decompressedSize)
Throw<std::runtime_error>("lz4Decompress: failed");
return decompressedSize;
}