Jann Horn
3e0a396546
xfs: fix type confusion in xfs_ioc_swapext
...
Without this check, the following XFS_I invocations would return bad
pointers when used on non-XFS inodes (perhaps pointers into preceding
allocator chunks).
This could be used by an attacker to trick xfs_swap_extents into
performing locking operations on attacker-chosen structures in kernel
memory, potentially leading to code execution in the kernel. (I have
not investigated how likely this is to be usable for an attack in
practice.)
Signed-off-by: Jann Horn <jann@thejh.net>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Dave Chinner <david@fromorbit.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2016-07-16 06:30:06 +09:00
..
2016-05-26 10:13:40 -07:00
2016-04-06 09:47:01 +10:00
2016-04-06 09:47:01 +10:00
2016-03-18 11:42:53 -04:00
2016-03-31 00:30:15 -04:00
2015-12-06 21:34:16 -05:00
2016-05-26 10:13:40 -07:00
2016-04-06 08:34:30 +10:00
2016-04-06 09:19:55 +10:00
2016-04-06 07:57:47 +10:00
2016-04-06 07:57:45 +10:00
2016-05-26 19:34:26 -07:00
2016-05-18 11:11:27 +10:00
2016-05-18 10:56:41 +10:00
2016-05-18 11:08:15 +10:00
2016-05-18 13:20:21 -04:00
2016-03-02 09:57:04 +11:00
2016-05-20 10:33:17 +10:00
2016-01-04 16:10:19 +11:00
2016-03-24 19:50:32 -07:00
2016-05-26 19:34:26 -07:00
2016-02-09 16:54:58 +11:00
2016-05-20 10:31:52 +10:00
2016-02-08 14:58:07 +11:00
2016-05-18 14:20:08 +10:00
2016-05-20 10:33:17 +10:00
2016-02-09 16:54:58 +11:00
2016-05-20 10:34:00 +10:00
2016-04-06 07:48:27 +10:00
2015-10-12 16:02:56 +11:00
2016-07-16 06:30:06 +09:00
2016-04-06 09:19:55 +10:00
2016-05-20 10:32:10 +10:00
2016-02-09 16:54:58 +11:00
2016-04-04 10:41:08 -07:00
2016-04-06 09:20:36 +10:00
2016-04-06 09:20:36 +10:00
2016-05-20 10:33:17 +10:00
2016-05-20 10:33:17 +10:00
2016-04-06 09:20:36 +10:00
2015-10-12 16:04:45 +11:00
2016-05-26 10:13:40 -07:00
2016-05-26 10:13:40 -07:00
2016-03-09 08:15:14 +11:00
2016-05-26 10:13:40 -07:00
2016-03-18 11:42:53 -04:00
2016-04-06 09:19:55 +10:00
2016-04-06 09:19:55 +10:00
2016-02-08 11:27:55 +11:00
2016-02-08 11:27:38 +11:00
2016-04-06 09:19:55 +10:00
2015-10-19 08:42:46 +11:00
2015-10-12 18:21:22 +11:00
2016-05-26 19:34:26 -07:00
2016-03-02 09:58:09 +11:00
2016-05-20 10:32:10 +10:00
2015-10-12 05:19:45 +11:00
2016-05-18 11:11:27 +10:00
2016-05-18 10:58:51 +10:00
2016-05-20 10:33:38 +10:00
2016-02-08 14:59:07 +11:00
2016-02-10 15:01:11 +11:00
2016-02-08 11:27:55 +11:00
2016-02-09 16:54:58 +11:00
2016-04-06 09:20:36 +10:00
2016-04-06 09:19:55 +10:00
2016-05-27 17:14:05 -07:00