Stian Skjelstad f08721ee2b udf_get_extendedattr() had no boundary checks. ...

[ Upstream commit 58bc6d1be2 ]

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-09-22 11:47:50 +02:00

..

balloc.c

…

dir.c

…

directory.c

…

ecma_167.h

…

file.c

…

ialloc.c

…

inode.c

udf: fix silent AED tagLocation corruption

2021-03-17 16:43:45 +01:00

Kconfig

…

lowlevel.c

…

Makefile

…

misc.c

udf_get_extendedattr() had no boundary checks.

2021-09-22 11:47:50 +02:00

namei.c

udf: Fix NULL pointer dereference in udf_symlink function

2021-07-20 16:15:59 +02:00

osta_udf.h

…

partition.c

…

super.c

udf: Check LVID earlier

2021-09-22 11:47:49 +02:00

symlink.c

…

truncate.c

…

udf_i.h

…

udf_sb.h

…

udfdecl.h

…

udfend.h

…

udftime.c

…

unicode.c

…