udf: Check length of extended attributes and allocation descriptors
authorJan Kara <jack@suse.cz>
Wed, 7 Jan 2015 12:49:08 +0000 (13:49 +0100)
committerWilly Tarreau <w@1wt.eu>
Fri, 18 Sep 2015 11:51:57 +0000 (13:51 +0200)
commit791299da239089e4e28b5605ea91126d0cc2b722
tree7cc4a8ee202c5e862a3bfa20203929108e39067b
parent835860830860a609ca2b7bdfbd5ddc342333f357
udf: Check length of extended attributes and allocation descriptors

commit 23b133bdc452aa441fcb9b82cbf6dd05cfd342d0 upstream.

Check length of extended attributes and allocation descriptors when
loading inodes from disk. Otherwise corrupted filesystems could confuse
the code and make the kernel oops.

Reported-by: Carl Henrik Lunde <chlunde@ping.uio.no>
Signed-off-by: Jan Kara <jack@suse.cz>
[bwh: Backported to 2.6.32: use make_bad_inode() instead of returning error]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
CVE-2015-4167

Signed-off-by: Willy Tarreau <w@1wt.eu>
fs/udf/inode.c