linux-stable/fs/isofs
Jan Kara afbd40f425 isofs: Fix out of bound access for corrupted isofs image
commit e96a1866b4 upstream.

When isofs image is suitably corrupted isofs_read_inode() can read data
beyond the end of buffer. Sanity-check the directory entry length before
using it.

Reported-and-tested-by: syzbot+6fc7fb214625d82af7d1@syzkaller.appspotmail.com
CC: stable@vger.kernel.org
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-11-12 14:28:24 +01:00
..
compress.c
dir.c isofs: release buffer head before return 2021-03-03 18:22:46 +01:00
export.c
inode.c isofs: Fix out of bound access for corrupted isofs image 2021-11-12 14:28:24 +01:00
isofs.h isofs: joliet: Fix iocharset=utf8 mount option 2021-09-22 11:45:17 +02:00
joliet.c isofs: joliet: Fix iocharset=utf8 mount option 2021-09-22 11:45:17 +02:00
Kconfig
Makefile
namei.c isofs: release buffer head before return 2021-03-03 18:22:46 +01:00
rock.c
rock.h
util.c
zisofs.h