On 01/08/2017 12:25 PM, Greg KH wrote: >On Sat, Jan 07, 2017 at 05:55:42PM +0100, Sven Schmidt wrote: >> This patch updates LZ4 kernel module to LZ4 v1.7.2 by Yann Collet. >> The kernel module is inspired by the previous work by Chanho Min. >> The updated LZ4 module will not break existing code since there were alias >> methods added to ensure backwards compatibility. > > Meta-comment. Does this update include all of the security fixes that > we have made over the past few years to the lz4 code? I don't want to > be adding back insecure functions that will cause us problems. > > Specifically look at the changes I made in 2014 in this directory for an > example of what I am talking about here. > Hi Greg, it doesn't. I didn't have that in mind until now. But I had a look at the related commits after I received your E-Mail and will review what I have to change (and, obviously, do the changes :)). Thanks, Sven -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
