]> git.baikalelectronics.ru Git - kernel.git/commit
squashfs: more metadata hardening
authorLinus Torvalds <torvalds@linux-foundation.org>
Mon, 30 Jul 2018 21:27:15 +0000 (14:27 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Tue, 31 Jul 2018 00:29:17 +0000 (17:29 -0700)
commit7606a9668193bffb9fa6477d128203e3a6e9e8f6
treee69a975786d0bff7cd3e117f88dc9b97380806e1
parent610275e97c88ac52b960b35194bc7f8fe0998f71
squashfs: more metadata hardening

Anatoly reports another squashfs fuzzing issue, where the decompression
parameters themselves are in a compressed block.

This causes squashfs_read_data() to be called in order to read the
decompression options before the decompression stream having been set
up, making squashfs go sideways.

Reported-by: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
Acked-by: Phillip Lougher <phillip.lougher@gmail.com>
Cc: stable@kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
fs/squashfs/block.c