Stian Skjelstad 9d999957cb udf_get_extendedattr() had no boundary checks. ...

[ Upstream commit 58bc6d1be2 ]

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-09-15 09:50:27 +02:00

..

balloc.c

…

dir.c

…

directory.c

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

ecma_167.h

…

file.c

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

ialloc.c

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

inode.c

udf: fix silent AED tagLocation corruption

2021-03-17 17:06:23 +01:00

Kconfig

…

lowlevel.c

…

Makefile

…

misc.c

udf_get_extendedattr() had no boundary checks.

2021-09-15 09:50:27 +02:00

namei.c

udf: Fix NULL pointer dereference in udf_symlink function

2021-07-19 09:44:40 +02:00

osta_udf.h

…

partition.c

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

super.c

udf: Fix iocharset=utf8 mount option

2021-09-15 09:50:25 +02:00

symlink.c

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

truncate.c

…

udf_i.h

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

udf_sb.h

udf: Fix iocharset=utf8 mount option

2021-09-15 09:50:25 +02:00

udfdecl.h

…

udfend.h

…

udftime.c

…

unicode.c

udf: Fix iocharset=utf8 mount option

2021-09-15 09:50:25 +02:00