Messages in this thread | | | Date | Thu, 4 Oct 2012 23:48:35 +0200 | From | Willy Tarreau <> | Subject | Re: [ 092/180] udf: Avoid run away loop when partition table length is corrupted |
| |
On Thu, Oct 04, 2012 at 10:23:48PM +0100, Ben Hutchings wrote: > On Tue, Oct 02, 2012 at 12:53:29AM +0200, Willy Tarreau wrote: > > 2.6.32-longterm review patch. If anyone has any objections, please let me know. > > > > ------------------ > > > > From: Jan Kara <jack@suse.cz> > > > > commit adee11b2085bee90bd8f4f52123ffb07882d6256 upstream. > > > > Check provided length of partition table so that (possibly maliciously) > > corrupted partition table cannot cause accessing data beyond current buffer. > [...] > > This is not quite paranoid enough; please add commit > 57b9655d01ef057a523e810d29c37ac09b80eead after this.
Queued, thanks! Willy
| |