Silvio Cesare
b7261fc5f5
UBIFS: Fix potential integer overflow in allocation
...
commit 353748a359f1821ee934afc579cf04572406b420 upstream.
There is potential for the size and len fields in ubifs_data_node to be
too large causing either a negative value for the length fields or an
integer overflow leading to an incorrect memory allocation. Likewise,
when the len field is small, an integer underflow may occur.
Signed-off-by: Silvio Cesare <silvio.cesare@gmail.com>
Fixes: 1e51764a3c2ac ("UBIFS: add new flash file system")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-03 11:24:59 +02:00
..
2017-11-30 08:40:49 +00:00
2017-11-02 11:10:55 +01:00
2018-05-30 07:51:47 +02:00
2018-06-21 04:02:59 +09:00
2018-04-24 09:36:39 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-07-03 11:24:57 +02:00
2017-11-02 11:10:55 +01:00
2018-05-30 07:52:09 +02:00
2018-06-26 08:06:31 +08:00
2017-11-24 08:37:05 +01:00
2017-11-02 11:10:55 +01:00
2017-11-30 08:40:44 +00:00
2018-02-16 20:23:11 +01:00
2017-11-02 11:10:55 +01:00
2018-06-21 04:02:42 +09:00
2017-11-02 11:10:55 +01:00
2017-09-07 11:59:42 -07:00
2018-05-30 07:51:47 +02:00
2018-06-26 08:06:29 +08:00
2018-05-30 07:52:33 +02:00
2017-12-05 11:26:29 +01:00
2018-05-30 07:52:25 +02:00
2018-07-03 11:24:49 +02:00
2018-05-30 07:52:35 +02:00
2017-11-02 11:10:55 +01:00
2018-05-25 16:17:35 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-04-19 08:56:21 +02:00
2018-06-21 04:02:41 +09:00
2018-05-01 12:58:06 -07:00
2018-05-30 07:51:47 +02:00
2018-05-30 07:51:47 +02:00
2018-02-16 20:22:59 +01:00
2018-02-03 17:39:08 +01:00
2017-11-02 11:10:55 +01:00
2018-03-28 18:24:43 +02:00
2018-06-26 08:06:29 +08:00
2018-02-03 17:39:08 +01:00
2018-04-19 08:56:21 +02:00
2018-05-30 07:51:47 +02:00
2017-11-02 11:10:55 +01:00
2018-06-21 04:02:41 +09:00
2017-11-02 11:10:55 +01:00
2018-06-21 04:02:57 +09:00
2017-11-02 11:10:55 +01:00
2018-06-26 08:06:33 +08:00
2018-04-19 08:56:21 +02:00
2018-06-21 04:02:57 +09:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-02-03 17:39:11 +01:00
2017-09-06 17:27:26 -07:00
2018-05-30 07:51:47 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-03-31 18:10:38 +02:00
2017-11-02 11:10:55 +01:00
2018-07-03 11:24:59 +02:00
2018-05-30 07:52:38 +02:00
2018-05-30 07:51:47 +02:00
2018-06-05 11:41:55 +02:00
2018-06-05 11:41:54 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-09-04 19:05:15 -04:00
2017-09-14 18:13:32 -07:00
2017-09-14 18:13:32 -07:00
2017-11-02 11:10:55 +01:00
2018-06-26 08:06:33 +08:00
2017-10-03 17:54:25 -07:00
2017-10-13 16:18:33 -07:00
2017-11-30 08:40:45 +00:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-04-26 11:02:14 +02:00
2018-05-30 07:52:03 +02:00
2018-03-08 22:41:06 -08:00
2017-11-02 11:10:55 +01:00
2017-09-08 18:26:49 -07:00
2018-03-03 10:24:21 +01:00
2017-12-17 15:07:59 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-05-16 10:10:25 +02:00
2017-09-13 09:11:44 -07:00
2017-09-13 09:11:44 -07:00
2017-11-02 11:10:55 +01:00
2017-10-16 12:11:56 -07:00
2017-11-02 11:10:55 +01:00
2018-02-22 15:42:25 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-04-19 08:56:19 +02:00
2018-06-21 04:02:45 +09:00
2017-11-02 11:10:55 +01:00
2017-09-05 12:53:12 +02:00
2018-02-16 20:23:05 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-02-22 15:42:28 +01:00
2017-11-02 11:10:55 +01:00
2017-09-04 19:05:15 -04:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-05-30 07:51:47 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-01-10 09:31:17 +01:00
2017-11-02 11:10:55 +01:00
2017-10-04 18:03:15 +11:00