From owner-freebsd-fs@FreeBSD.ORG Fri Sep 2 16:34:33 2011 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BE0CC106564A for ; Fri, 2 Sep 2011 16:34:33 +0000 (UTC) (envelope-from radiomlodychbandytow@o2.pl) Received: from tur.go2.pl (tur.go2.pl [193.17.41.50]) by mx1.freebsd.org (Postfix) with ESMTP id 7BDCC8FC15 for ; Fri, 2 Sep 2011 16:34:33 +0000 (UTC) Received: from moh2-ve2.go2.pl (moh2-ve2.go2.pl [193.17.41.200]) by tur.go2.pl (Postfix) with ESMTP id 66319230C14 for ; Fri, 2 Sep 2011 18:16:17 +0200 (CEST) Received: from moh2-ve2.go2.pl (unknown [10.0.0.200]) by moh2-ve2.go2.pl (Postfix) with ESMTP id 355D6B00169 for ; Fri, 2 Sep 2011 18:16:15 +0200 (CEST) Received: from unknown (unknown [10.0.0.42]) by moh2-ve2.go2.pl (Postfix) with SMTP for ; Fri, 2 Sep 2011 18:16:14 +0200 (CEST) Received: from host892524678.com-promis.3s.pl [89.25.246.78] by poczta.o2.pl with ESMTP id bfXQjd; Fri, 02 Sep 2011 18:16:14 +0200 Message-ID: <4E61014B.7080100@o2.pl> Date: Fri, 02 Sep 2011 18:16:11 +0200 From: =?UTF-8?B?UmFkaW8gbcWCb2R5Y2ggYmFuZHl0w7N3?= User-Agent: Mozilla/5.0 (Windows NT 5.2; WOW64; rv:6.0.1) Gecko/20110830 Thunderbird/6.0.1 MIME-Version: 1.0 To: freebsd-fs@freebsd.org Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-O2-Trust: 2, 61 X-O2-SPF: neutral Subject: [ZFS] lzjb_uncompress possible access violation? X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Sep 2011 16:34:33 -0000 As far as I can see, when checksumming is turned off or there's a collision, it is possible that lzjb_uncompress is fed with corrupted data. Source length is entirely ignored and since source has to be shorter than dest, it is broken. -- Twoje radio