Stian Skjelstad 983d381214 udf_get_extendedattr() had no boundary checks. ...

[ Upstream commit 58bc6d1be2f3b0ceecb6027dfa17513ec6aa2abb ]

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-09-22 11:41:19 +02:00

..

balloc.c

udf: use int for allocated blocks instead of sector_t

2015-03-16 08:24:16 +01:00

dir.c

udf: Make udf_get_filename() return error instead of 0 length file name

2015-05-18 11:23:06 +02:00

directory.c

udf: Detect incorrect directory size

2018-07-03 11:21:34 +02:00

ecma_167.h

…

file.c

udf: remove double err declaration in udf_file_write_iter()

2015-05-18 11:23:09 +02:00

ialloc.c

udf: saner calling conventions for udf_new_inode()

2014-09-04 21:37:41 +02:00

inode.c

udf: Avoid accessing uninitialized data on failed inode read

2020-10-29 09:03:09 +01:00

Kconfig

udf: Update Kconfig description

2015-01-05 11:04:37 +01:00

lowlevel.c

udf: use linux/uaccess.h

2014-07-15 22:40:23 +02:00

Makefile

…

misc.c

udf_get_extendedattr() had no boundary checks.

2021-09-22 11:41:19 +02:00

namei.c

udf: Fix NULL pointer dereference in udf_symlink function

2021-07-20 16:22:37 +02:00

osta_udf.h

…

partition.c

udf: remove redundant buffer_head.h includes

2015-03-14 07:54:02 +01:00

super.c

udf: Limit sparing table size

2020-10-29 09:03:09 +01:00

symlink.c

udf: Return -ENOMEM when allocation fails in udf_get_filename()

2015-05-18 11:23:03 +02:00

truncate.c

udf: Fix crash on IO error during truncate

2019-04-03 06:23:14 +02:00

udf_i.h

fs: cleanup slight list_entry abuse

2015-06-23 18:01:59 -04:00

udf_sb.h

udf: Fortify LVID loading

2013-09-24 11:23:33 +02:00

udfdecl.h

udf: Check path length when reading symlink

2014-12-19 14:12:08 +01:00

udfend.h

…

udftime.c

udf: remove redundant sys_tz declaration

2014-09-29 13:45:12 +02:00

unicode.c

udf: Check output buffer length when converting name to CS0

2016-02-25 12:01:18 -08:00