linux-stable/fs/udf
Stian Skjelstad 97ab90bcbe udf_get_extendedattr() had no boundary checks.
[ Upstream commit 58bc6d1be2 ]

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-09-22 11:45:18 +02:00
..
balloc.c
dir.c
directory.c udf: Detect incorrect directory size 2018-07-03 11:25:03 +02:00
ecma_167.h udf: use __packed instead of __attribute__ ((packed)) 2017-01-10 11:29:11 +01:00
file.c udf: Use i_size_read() in udf_adinicb_writepage() 2017-06-14 11:21:01 +02:00
ialloc.c
inode.c udf: fix silent AED tagLocation corruption 2021-03-17 16:34:30 +01:00
Kconfig
lowlevel.c udf: atomically read inode size 2017-01-10 11:57:34 +01:00
Makefile
misc.c udf_get_extendedattr() had no boundary checks. 2021-09-22 11:45:18 +02:00
namei.c udf: Fix NULL pointer dereference in udf_symlink function 2021-07-20 16:17:42 +02:00
osta_udf.h udf: use __packed instead of __attribute__ ((packed)) 2017-01-10 11:29:11 +01:00
partition.c
super.c udf: Check LVID earlier 2021-09-22 11:45:17 +02:00
symlink.c statx: Add a system call to make enhanced file info available 2017-03-02 20:51:15 -05:00
truncate.c udf: Fix crash on IO error during truncate 2019-03-27 14:13:52 +09:00
udf_i.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
udf_sb.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
udfdecl.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
udfend.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
udftime.c udf: Convert udf_disk_stamp_to_time() to use mktime64() 2017-06-14 11:21:02 +02:00
unicode.c udf: Allow mounting volumes with incorrect identification strings 2018-12-08 13:03:39 +01:00