Andrew Morton
e595447e17
[PATCH] rock.c: handle corrupted directories
...
The bug in rock.c is that it's totally trusting of the contents of the
directories. If the directory says there's a continuation 10000 bytes into
this 4k block then we cheerily poke around in memory we don't own and oops.
So change rock_continue() to apply various sanity checks, at least ensuring
that the offset+length remain within the bounds for the header part of a
struct rock_ridge directory entry.
Note that the kernel can still overindex the buffer due to the variable size
of the rock-ridge directory entries. We cannot check that in rock_continue()
unless we go parse the directory entry's signature and work out its size.
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-06-21 19:07:38 -07:00
..
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-05-01 08:59:01 -07:00
2005-04-16 15:20:36 -07:00
2005-06-21 19:07:35 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-06-09 14:44:07 -07:00
2005-06-20 15:15:11 -07:00
2005-04-16 15:20:36 -07:00
2005-06-20 15:15:30 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:25:45 -07:00
2005-05-18 09:10:02 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-05-01 08:59:16 -07:00
2005-05-01 08:59:16 -07:00
2005-05-28 16:46:11 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-06-21 18:46:16 -07:00
2005-06-21 19:07:38 -07:00
2005-06-02 15:12:29 -07:00
2005-04-16 15:20:36 -07:00
2005-05-05 16:36:47 -07:00
2005-06-03 14:09:54 -05:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-06-13 10:33:02 -07:00
2005-04-16 15:26:38 -07:00
2005-05-05 16:36:47 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-05-06 22:09:27 -07:00
2005-06-21 18:46:14 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-05-21 16:45:24 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-06-20 15:15:38 -07:00
2005-04-16 15:20:36 -07:00
2005-05-31 14:54:18 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-06-21 18:46:13 -07:00
2005-05-01 08:59:16 -07:00
2005-04-16 15:20:36 -07:00
2005-05-05 16:36:47 -07:00
2005-06-21 18:46:16 -07:00
2005-04-16 15:20:36 -07:00
2005-06-21 18:46:16 -07:00
2005-04-16 15:20:36 -07:00
2005-06-06 14:57:51 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-05-01 08:59:26 -07:00
2005-05-05 16:36:44 -07:00
2005-06-21 18:46:17 -07:00
2005-05-05 16:36:47 -07:00
2005-04-16 15:20:36 -07:00
2005-04-27 15:39:03 -07:00
2005-05-05 16:36:47 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:25:50 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:25:46 -07:00
2005-05-05 16:36:47 -07:00
2005-06-18 13:06:22 -07:00
2005-05-01 08:59:14 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-05-01 08:59:26 -07:00
2005-05-05 16:36:44 -07:00
2005-04-16 15:20:36 -07:00
2005-06-21 15:41:16 -07:00
2005-04-16 15:20:36 -07:00
2005-06-20 15:15:30 -07:00
2005-05-05 16:36:47 -07:00
2005-04-16 15:20:36 -07:00
2005-05-05 16:36:47 -07:00
2005-06-04 17:12:59 -07:00
2005-06-06 14:42:27 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:25:47 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:25:49 -07:00
2005-04-16 15:20:36 -07:00
2005-05-05 16:36:47 -07:00
2005-05-01 08:59:26 -07:00
2005-04-16 15:20:36 -07:00
2005-06-21 18:46:22 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00