Gianfranco TradandGreg Kroah-Hartman 72e445df65 udf: fix uninit-value use in udf_get_fileshortad ...

[ Upstream commit 264db9d666 ]

Check for overflow when computing alen in udf_current_aext to mitigate
later uninit-value use in udf_get_fileshortad KMSAN bug[1].
After applying the patch reproducer did not trigger any issue[2].

[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df
[2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000

Reported-by: syzbot+8901c4560b7ab5c2f9df@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df
Tested-by: syzbot+8901c4560b7ab5c2f9df@syzkaller.appspotmail.com
Suggested-by: Jan Kara <jack@suse.com>
Signed-off-by: Gianfranco Trad <gianf.trad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Link: https://patch.msgid.link/20240925074613.8475-3-gianf.trad@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-11-01 01:56:03 +01:00

..

balloc.c

udf: prevent integer overflow in udf_bitmap_free_blocks()

2024-08-14 13:52:46 +02:00

dir.c

udf: Convert udf_readdir() to new directory iteration

2024-10-22 15:56:40 +02:00

directory.c

udf: Avoid directory type conversion failure due to ENOMEM

2024-10-22 15:56:52 +02:00

ecma_167.h

…

file.c

…

ialloc.c

…

inode.c

udf: fix uninit-value use in udf_get_fileshortad

2024-11-01 01:56:03 +01:00

Kconfig

…

lowlevel.c

…

Makefile

…

misc.c

…

namei.c

udf: Don't return bh from udf_expand_dir_adinicb()

2024-10-22 15:56:42 +02:00

osta_udf.h

…

partition.c

…

super.c

udf: Avoid excessive partition lengths

2024-09-12 11:10:19 +02:00

symlink.c

…

truncate.c

udf: refactor udf_current_aext() to handle error

2024-11-01 01:56:03 +01:00

udf_i.h

…

udf_sb.h

…

udfdecl.h

udf: refactor udf_current_aext() to handle error

2024-11-01 01:56:03 +01:00

udfend.h

…

udftime.c

udf: udftime: prevent overflow in udf_disk_stamp_to_time()

2024-06-27 13:46:17 +02:00

unicode.c

udf: Fix uninitialized array access for some pathnames

2023-07-27 08:50:32 +02:00