]> git.baikalelectronics.ru Git - uboot.git/commit
CVE-2019-13104: ext4: check for underflow in ext4fs_read_file
authorPaul Emge <paulemge@forallsecure.com>
Mon, 8 Jul 2019 23:37:05 +0000 (16:37 -0700)
committerTom Rini <trini@konsulko.com>
Thu, 18 Jul 2019 15:31:29 +0000 (11:31 -0400)
commit0f40b0fd4be6c9641be6561ab8ae7077b33e3f6a
tree1cfc04f11647a0a0a5012195205acc33066b8830
parent8b1c1e8432cdc35bdb7935b1ff7bc28b023ff610
CVE-2019-13104: ext4: check for underflow in ext4fs_read_file

in ext4fs_read_file, it is possible for a broken/malicious file
system to cause a memcpy of a negative number of bytes, which
overflows all memory. This patch fixes the issue by checking for
a negative length.

Signed-off-by: Paul Emge <paulemge@forallsecure.com>
fs/ext4/ext4fs.c