projects / wrapfs-5.3.y.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 28ce50f) | patch
udf_get_extendedattr() had no boundary checks.
authorStian Skjelstad <stian.skjelstad@gmail.com>
Sun, 22 Aug 2021 09:33:32 +0000 (11:33 +0200)
committerJan Kara <jack@suse.cz>
Mon, 23 Aug 2021 11:35:19 +0000 (13:35 +0200)
commit58bc6d1be2f3b0ceecb6027dfa17513ec6aa2abb
tree35c805c134c52f71af8a014a90c7e626412e4c4ctree | snapshot
parent28ce50f8d96ec9035f60c9348294ea26b94db944commit | diff
udf_get_extendedattr() had no boundary checks.

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
fs/udf/misc.c diff | blob | history
wrapfs-5.3.y