lkml.org 
[lkml]   [2018]   [Jul]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 4.9 093/101] udf: Detect incorrect directory size
    Date
    4.9-stable review patch.  If anyone has any objections, please let me know.

    ------------------

    From: Jan Kara <jack@suse.cz>

    commit fa65653e575fbd958bdf5fb9c4a71a324e39510d upstream.

    Detect when a directory entry is (possibly partially) beyond directory
    size and return EIO in that case since it means the filesystem is
    corrupted. Otherwise directory operations can further corrupt the
    directory and possibly also oops the kernel.

    CC: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
    CC: stable@vger.kernel.org
    Reported-and-tested-by: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
    Signed-off-by: Jan Kara <jack@suse.cz>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

    ---
    fs/udf/directory.c | 3 +++
    1 file changed, 3 insertions(+)

    --- a/fs/udf/directory.c
    +++ b/fs/udf/directory.c
    @@ -150,6 +150,9 @@ struct fileIdentDesc *udf_fileident_read
    sizeof(struct fileIdentDesc));
    }
    }
    + /* Got last entry outside of dir size - fs is corrupted! */
    + if (*nf_pos > dir->i_size)
    + return NULL;
    return fi;
    }


    \
     
     \ /
      Last update: 2018-07-01 18:29    [W:2.749 / U:0.044 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site