Jan Kara 9795e0e8ac udf: Fix races with i_size changes during readpage
__udf_adinicb_readpage() uses i_size several times. When truncate
changes i_size while the function is running, it can observe several
different values and thus e.g. expose uninitialized parts of page to
userspace. Also use i_size_read() in the function since it does not hold
inode_lock. Since i_size is guaranteed to be small, this cannot really
cause any issues even on 32-bit archs but let's be careful.

CC: stable@vger.kernel.org
Fixes: 9c2fc0de1a6e638fe58c354a463f544f42a90a09
Signed-off-by: Jan Kara <jack@suse.cz>
2017-06-14 11:21:01 +02:00
..
2016-11-01 09:43:26 -06:00
2015-01-05 11:04:37 +01:00
2017-01-10 11:57:34 +01:00
2009-06-11 21:36:13 -04:00
2017-01-10 11:37:31 +01:00
2017-04-24 16:27:52 +02:00
2015-06-23 18:01:59 -04:00