Nikolaus Schulz
30d1872d9e
fat: fix buffer overflow in vfat_create_shortname() ...
When using the string representation of a random counter as part of the base
name, ensure that it is no longer than 4 bytes.
Since we are repeatedly decrementing the counter in a loop until we have found a
unique base name, the counter may wrap around zero; therefore, it is not enough
to mask its higher bits before entering the loop, this must be done inside the
loop.
[hirofumi@mail.parknet.co.jp: use snprintf()]
Signed-off-by: Nikolaus Schulz <microschulz@web.de>
Cc: stable@kernel.org
Signed-off-by: OGAWA Hirofumi <hirofumi@mail.parknet.co.jp>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2010-03-31 10:34:11 -07:00
2010-03-13 09:05:37 -06:00
2010-03-05 13:25:52 -05:00
2010-03-08 16:55:37 +01:00
2010-03-22 09:57:19 -07:00
2010-03-03 14:07:54 -05:00
2010-02-07 03:06:21 -05:00
2010-03-05 13:25:52 -05:00
2010-03-18 16:50:55 -07:00
2010-02-20 10:06:35 -05:00
2010-03-28 21:23:56 -07:00
2010-03-19 09:36:18 -07:00
2010-01-14 09:05:42 -05:00
2010-02-08 14:38:36 -05:00
2009-12-11 15:18:05 -08:00
2010-03-12 16:04:50 -08:00
2010-01-19 22:36:06 -06:00
2010-03-05 13:25:52 -05:00
2010-03-05 13:20:53 -08:00
2010-03-29 14:30:19 -07:00
2010-03-25 14:10:53 -07:00
2010-03-31 10:34:11 -07:00
2010-03-29 09:14:47 -07:00
2010-03-08 16:55:37 +01:00
2010-03-13 14:38:53 -08:00
2010-03-05 13:25:52 -05:00
2010-03-05 13:25:52 -05:00
2010-03-03 14:07:58 -05:00
2010-03-03 14:08:00 -05:00
2009-12-16 12:16:47 -05:00
2009-12-16 10:43:34 -08:00
2010-03-08 16:55:37 +01:00
2010-02-24 12:11:20 -05:00
2010-03-17 18:43:47 -07:00
2010-03-05 13:20:53 -08:00
2010-02-08 16:20:35 -05:00
2010-03-29 21:14:52 +02:00
2010-03-05 13:25:52 -05:00
2010-03-22 05:34:13 -04:00
2010-03-08 16:55:37 +01:00
2010-03-24 01:17:20 +09:00
2010-02-19 03:35:12 -05:00
2010-03-17 18:43:47 -07:00
2010-03-23 18:22:59 -07:00
2010-03-05 13:25:52 -05:00
2010-03-24 16:31:22 -07:00
2010-03-24 16:31:22 -07:00
2010-02-04 11:55:46 +01:00
2010-03-05 00:20:31 +01:00
2010-01-16 12:15:40 -08:00
2010-03-24 16:31:21 -07:00
2010-01-26 22:22:26 -05:00
2010-03-05 15:35:35 +00:00
2010-03-07 17:04:52 -08:00
2010-03-05 13:25:52 -05:00
2010-03-07 09:54:44 -08:00
2010-03-12 16:22:50 -08:00
2010-03-12 15:52:35 -08:00
2010-03-16 15:40:53 -05:00
2009-12-16 07:20:13 -08:00
2010-03-12 16:25:23 -08:00
2010-03-06 11:26:29 -08:00
2010-03-24 16:31:19 -07:00
2010-03-24 16:43:29 -07:00
2010-03-06 11:26:46 -08:00
2010-03-06 11:26:29 -08:00
2010-01-29 08:22:01 -08:00
2010-01-30 20:28:19 +01:00
2010-03-08 16:55:37 +01:00
2010-02-07 03:06:21 -05:00
2010-03-12 16:04:50 -08:00
2010-03-06 11:26:45 -08:00
2010-03-06 11:26:35 -08:00
2010-03-12 15:52:32 -08:00
2010-03-03 14:13:08 -05:00
2009-12-17 04:52:13 -05:00
2010-01-25 12:26:38 -02:00
2009-12-22 12:27:34 -05:00
2010-03-06 11:26:46 -08:00
2010-03-06 11:26:29 -08:00
2010-03-06 11:26:25 -08:00
2010-03-06 11:26:29 -08:00
2010-03-05 13:25:52 -05:00
2009-12-16 12:16:49 -05:00
2010-03-05 00:20:30 +01:00
2010-03-03 14:07:59 -05:00
2010-03-19 09:43:06 -07:00
2010-03-03 13:00:17 -05:00
2010-03-08 16:55:37 +01:00
2010-03-19 09:43:06 -07:00
2010-02-04 11:55:45 +01:00
2010-03-26 12:41:05 -04:00
2010-03-03 14:08:00 -05:00
2010-03-03 13:00:21 -05:00
2010-03-05 13:20:53 -08:00
2009-12-17 10:51:40 -05:00
2010-03-03 13:00:22 -05:00
2010-03-03 14:07:55 -05:00
2010-03-24 16:43:29 -07:00
2010-03-12 15:52:32 -08:00
2010-03-07 15:48:26 -08:00
2009-12-22 12:27:34 -05:00
2009-12-17 10:58:17 -05:00
2009-12-23 13:33:54 +01:00
2010-03-03 14:08:00 -05:00
2010-03-05 00:20:24 +01:00
2009-12-22 12:27:34 -05:00
2009-12-16 12:16:49 -05:00
30d1872d9e