Gianfranco Trad 5eb76fb98b udf: fix uninit-value use in udf_get_fileshortad ...

[ Upstream commit 264db9d666ad9a35075cc9ed9ec09d021580fbb1 ]

Check for overflow when computing alen in udf_current_aext to mitigate
later uninit-value use in udf_get_fileshortad KMSAN bug[1].
After applying the patch reproducer did not trigger any issue[2].

[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df
[2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000

Reported-by: syzbot+8901c4560b7ab5c2f9df@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df
Tested-by: syzbot+8901c4560b7ab5c2f9df@syzkaller.appspotmail.com
Suggested-by: Jan Kara <jack@suse.com>
Signed-off-by: Gianfranco Trad <gianf.trad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Link: https://patch.msgid.link/20240925074613.8475-3-gianf.trad@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-11-08 16:19:21 +01:00

..

balloc.c

udf: prevent integer overflow in udf_bitmap_free_blocks()

2024-08-19 05:32:11 +02:00

dir.c

udf: Fix crash after seekdir

2021-11-26 11:36:23 +01:00

directory.c

udf: Remove pointless union in udf_inode_info

2023-03-17 08:31:42 +01:00

ecma_167.h

…

file.c

udf: Remove pointless union in udf_inode_info

2023-03-17 08:31:42 +01:00

ialloc.c

udf: Remove pointless union in udf_inode_info

2023-03-17 08:31:42 +01:00

inode.c

udf: fix uninit-value use in udf_get_fileshortad

2024-11-08 16:19:21 +01:00

Kconfig

udf: Always require NLS support

2018-04-19 16:00:48 +02:00

lowlevel.c

…

Makefile

…

misc.c

udf: Remove pointless union in udf_inode_info

2023-03-17 08:31:42 +01:00

namei.c

udf: Remove pointless union in udf_inode_info

2023-03-17 08:31:42 +01:00

osta_udf.h

…

partition.c

udf: Remove pointless union in udf_inode_info

2023-03-17 08:31:42 +01:00

super.c

udf: Avoid excessive partition lengths

2024-09-12 11:02:51 +02:00

symlink.c

udf: Remove pointless union in udf_inode_info

2023-03-17 08:31:42 +01:00

truncate.c

udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size

2023-01-18 11:30:00 +01:00

udf_i.h

udf: Preserve link count of system files

2023-03-17 08:31:42 +01:00

udf_sb.h

udf: Define EFSCORRUPTED error code

2023-03-11 16:31:45 +01:00

udfdecl.h

udf: convert inode stamps to timespec64

2018-06-27 13:58:00 +02:00

udfend.h

…

udftime.c

udf: udftime: prevent overflow in udf_disk_stamp_to_time()

2024-07-05 09:00:27 +02:00

unicode.c

udf: Fix uninitialized array access for some pathnames

2023-08-30 16:31:42 +02:00