Eric Biggers fe10e398e8 reiserfs: fix buffer overflow with long warning messages ...

ReiserFS prepares log messages into a 1024-byte buffer with no bounds
checks.  Long messages, such as the "unknown mount option" warning when
userspace passes a crafted mount options string, overflow this buffer.
This causes KASAN to report a global-out-of-bounds write.

Fix it by truncating messages to the buffer size.

Link: http://lkml.kernel.org/r/20180707203621.30922-1-ebiggers3@gmail.com
Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Reported-by: syzbot+b890b3335a4d8c608963@syzkaller.appspotmail.com
Signed-off-by: Eric Biggers <ebiggers@google.com>
Reviewed-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2018-07-14 11:11:10 -07:00

..

9p

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

adfs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

affs

…

afs

Merge branch 'afs-proc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-06-16 16:32:04 +09:00

autofs

autofs: fix slab out of bounds read in getname_kernel()

2018-07-14 11:11:09 -07:00

befs

fix a series of Documentation/ broken file name references

2018-06-15 18:10:01 -03:00

bfs

…

btrfs

Merge tag 'for-4.18-rc2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux

2018-07-01 12:38:16 -07:00

cachefiles

Merge branch 'hch.procfs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-06-04 10:00:01 -07:00

ceph

ceph: fix dentry leak in splice_dentry()

2018-06-26 18:42:44 +02:00

cifs

cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf()

2018-07-05 13:48:25 -05:00

coda

vfs: change inode times to use struct timespec64

2018-06-05 16:57:31 -07:00

configfs

vfs: change inode times to use struct timespec64

2018-06-05 16:57:31 -07:00

cramfs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

crypto

Merge tag 'f2fs-for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs

2018-06-11 10:16:13 -07:00

debugfs

Revert "debugfs: inode: debugfs_create_dir uses mode permission from parent"

2018-06-12 20:52:16 -07:00

devpts

…

dlm

treewide: Use array_size() in vmalloc()

2018-06-12 16:19:22 -07:00

ecryptfs

…

efivarfs

…

efs

…

exofs

exofs: avoid VLA in structures

2018-06-15 07:55:24 +09:00

exportfs

…

ext2

ext2: add warning when specifying nocheck option

2018-06-20 11:04:26 +02:00

ext4

Merge tag 'ext4_for_linus_stable' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4

2018-07-08 11:10:30 -07:00

f2fs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

fat

Merge branch 'akpm' (patches from Andrew)

2018-06-15 08:51:42 +09:00

freevxfs

…

fscache

…

fuse

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

gfs2

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

hfs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

hfsplus

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

hostfs

vfs: change inode times to use struct timespec64

2018-06-05 16:57:31 -07:00

hpfs

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

hugetlbfs

…

isofs

…

jbd2

Merge tag 'ext4_for_linus_stable' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4

2018-07-08 11:10:30 -07:00

jffs2

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

jfs

Merge tag 'jfs-4.18' of git://github.com/kleikamp/linux-shaggy

2018-06-19 07:47:32 +09:00

kernfs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

lockd

…

minix

…

nfs

Merge tag 'nfs-for-4.18-2' of git://git.linux-nfs.org/projects/trondmy/linux-nfs

2018-06-22 06:21:34 +09:00

nfs_common

…

nfsd

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

nilfs2

…

nls

…

notify

…

ntfs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

ocfs2

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

omfs

…

openpromfs

…

orangefs

Merge tag 'docs-broken-links' of git://linuxtv.org/mchehab/experimental

2018-06-17 05:25:18 +09:00

overlayfs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

proc

fs/proc/task_mmu.c: fix Locked field in /proc/pid/smaps*

2018-07-14 11:11:09 -07:00

pstore

pstore: Remove bogus format string definition

2018-06-14 14:57:24 +02:00

qnx4

…

qnx6

…

quota

quota: Cleanup list iteration in dqcache_shrink_scan()

2018-06-20 11:04:26 +02:00

ramfs

…

reiserfs

reiserfs: fix buffer overflow with long warning messages

2018-07-14 11:11:10 -07:00

romfs

…

squashfs

…

sysfs

unfuck sysfs_mount()

2018-05-21 14:30:09 -04:00

sysv

…

tracefs

…

ubifs

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

udf

udf: Drop unused arguments of udf_delete_aext()

2018-06-20 11:05:49 +02:00

ufs

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

xfs

xfs: fix fdblocks accounting w/ RMAPBT per-AG reservation

2018-06-24 12:00:12 -07:00

aio.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

anon_inodes.c

…

attr.c

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

bad_inode.c

vfs: change inode times to use struct timespec64

2018-06-05 16:57:31 -07:00

binfmt_aout.c

…

binfmt_elf_fdpic.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

binfmt_elf.c

fs, elf: make sure to page align bss in load_elf_library

2018-07-14 11:11:10 -07:00

binfmt_em86.c

…

binfmt_flat.c

…

binfmt_misc.c

docs: Fix more broken references

2018-06-15 18:11:26 -03:00

binfmt_script.c

…

block_dev.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

buffer.c

fs: move page_cache_seek_hole_data to iomap.c

2018-06-01 18:37:33 -07:00

char_dev.c

block, char_dev: Use correct format specifier for unsigned ints

2018-03-15 17:59:24 +01:00

compat_binfmt_elf.c

…

compat_ioctl.c

autofs: clean up includes

2018-06-07 17:34:40 -07:00

compat.c

ncpfs: remove compat functionality

2018-06-05 19:23:26 +02:00

coredump.c

…

d_path.c

split d_path() and friends into a separate file

2018-03-29 15:07:46 -04:00

dax.c

Merge tag 'libnvdimm-for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

2018-06-08 17:21:52 -07:00

dcache.c

Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-06-04 10:14:28 -07:00

dcookies.c

…

direct-io.c

…

drop_caches.c

…

eventfd.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

eventpoll.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

exec.c

Merge branch 'core-rseq-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2018-06-10 10:17:09 -07:00

fcntl.c

mm: restructure memfd code

2018-06-07 17:34:35 -07:00

fhandle.c

…

file_table.c

…

file.c

…

filesystems.c

…

fs_pin.c

…

fs_struct.c

…

fs-writeback.c

…

inode.c

Fix up non-directory creation in SGID directories

2018-07-05 12:36:36 -07:00

internal.h

Revert "fs: fold open_check_o_direct into do_dentry_open"

2018-06-03 10:58:23 -07:00

ioctl.c

…

iomap.c

Merge tag 'xfs-4.18-merge-10' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux

2018-06-12 15:49:00 -07:00

Kconfig

autofs: remove left-over autofs4 stubs

2018-06-11 08:22:34 -07:00

Kconfig.binfmt

docs: Fix more broken references

2018-06-15 18:11:26 -03:00

libfs.c

…

locks.c

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

Makefile

autofs: remove left-over autofs4 stubs

2018-06-11 08:22:34 -07:00

mbcache.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

mount.h

…

mpage.c

…

namei.c

Merge branch 'afs-proc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-06-16 16:32:04 +09:00

namespace.c

…

no-block.c

…

nsfs.c

…

open.c

Revert "fs: fold open_check_o_direct into do_dentry_open"

2018-06-03 10:58:23 -07:00

pipe.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

pnode.c

…

pnode.h

…

posix_acl.c

…

proc_namespace.c

…

read_write.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

readdir.c

…

select.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

seq_file.c

…

signalfd.c

Merge branch 'work.compat' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-06-16 16:21:50 +09:00

splice.c

Merge branch 'work.compat' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-06-16 16:21:50 +09:00

stack.c

…

stat.c

…

statfs.c

…

super.c

Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-06-04 10:14:28 -07:00

sync.c

…

timerfd.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

userfaultfd.c

userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access

2018-07-03 17:32:18 -07:00

utimes.c

…

xattr.c

…