Stian Skjelstad 97ab90bcbe udf_get_extendedattr() had no boundary checks. ...

[ Upstream commit 58bc6d1be2f3b0ceecb6027dfa17513ec6aa2abb ]

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-09-22 11:45:18 +02:00

..

balloc.c

…

dir.c

…

directory.c

udf: Detect incorrect directory size

2018-07-03 11:25:03 +02:00

ecma_167.h

…

file.c

…

ialloc.c

…

inode.c

udf: fix silent AED tagLocation corruption

2021-03-17 16:34:30 +01:00

Kconfig

…

lowlevel.c

…

Makefile

…

misc.c

udf_get_extendedattr() had no boundary checks.

2021-09-22 11:45:18 +02:00

namei.c

udf: Fix NULL pointer dereference in udf_symlink function

2021-07-20 16:17:42 +02:00

osta_udf.h

…

partition.c

…

super.c

udf: Check LVID earlier

2021-09-22 11:45:17 +02:00

symlink.c

…

truncate.c

udf: Fix crash on IO error during truncate

2019-03-27 14:13:52 +09:00

udf_i.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udf_sb.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udfdecl.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udfend.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udftime.c

…

unicode.c

udf: Allow mounting volumes with incorrect identification strings

2018-12-08 13:03:39 +01:00