ext2: skip pages past number of blocks in ext2_find_entry (CVE-2006-6054)
authorEric Sandeen <sandeen@redhat.com>
Mon, 8 Jan 2007 05:59:28 +0000 (06:59 +0100)
committerAdrian Bunk <bunk@stusta.de>
Tue, 9 Jan 2007 02:23:34 +0000 (03:23 +0100)
commitb87d1a00d3eb7fb1eba6e7db2e26342724c0410e
tree3180b383a0dc9fa75bb3bc11b79fc16aa57f2247
parentad3c43bb4a85be908332a2872b0ba9d368a7f329
ext2: skip pages past number of blocks in ext2_find_entry (CVE-2006-6054)

This one was pointed out on the MOKB site:
http://kernelfun.blogspot.com/2006/11/mokb-09-11-2006-linux-26x-ext2checkpage.html

If a directory's i_size is corrupted, ext2_find_entry() will keep processing
pages until the i_size is reached, even if there are no more blocks associated
with the directory inode.  This patch puts in some minimal sanity-checking
so that we don't keep checking pages (and issuing errors) if we know there
can be no more data to read, based on the block count of the directory inode.

This is somewhat similar in approach to the ext3 patch I sent earlier this
year.

Signed-off-by: Eric Sandeen <sandeen@redhat.com>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
fs/ext2/dir.c