The LZO decompressor wasn't initializing the maximum output size, which meant it would fail to decompress most of the time.

Reported-by: Matthias Weißer weisserm@arcor.de Signed-off-by: Kees Cook keescook@chromium.org Tested-by: Matthias Weißer weisserm@arcor.de --- common/cmd_bootm.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/cmd_bootm.c b/common/cmd_bootm.c index 9751edc..c243a5b 100644 --- a/common/cmd_bootm.c +++ b/common/cmd_bootm.c @@ -453,7 +453,7 @@ static int bootm_load_os(bootm_headers_t *images, unsigned long *load_end, #endif /* CONFIG_LZMA */ #ifdef CONFIG_LZO case IH_COMP_LZO: { - size_t size; + size_t size = unc_len;

printf(" Uncompressing %s ... ", type_name);