]> git.baikalelectronics.ru Git - kernel.git/commit
udf_get_extendedattr() had no boundary checks.
authorStian Skjelstad <stian.skjelstad@gmail.com>
Sun, 22 Aug 2021 09:33:32 +0000 (11:33 +0200)
committerJan Kara <jack@suse.cz>
Mon, 23 Aug 2021 11:35:19 +0000 (13:35 +0200)
commit693bcc048beeecf5efbfcca9c95d13b6fd0cf517
tree35c805c134c52f71af8a014a90c7e626412e4c4c
parentd1482e9929705019d968e52503833fe88fdcb161
udf_get_extendedattr() had no boundary checks.

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
fs/udf/misc.c