Jaegeuk Kim ec236cd6a2 f2fs: sanity check of xattr entry size ...

commit 64beba0558fce7b59e9a8a7afd77290e82a22163 upstream.

There is a security report where f2fs_getxattr() has a hole to expose wrong
memory region when the image is malformed like this.

f2fs_getxattr: entry->e_name_len: 4, size: 12288, buffer_size: 16384, len: 4

Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
[bwh: Backported to 4.14: Keep using kzalloc()]
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-05-20 08:17:03 +02:00

..

acl.c

f2fs: fix wrong return value of f2fs_acl_create

2019-02-12 19:46:00 +01:00

acl.h

f2fs: remove dead code f2fs_check_acl

2016-09-14 16:52:36 -07:00

checkpoint.c

f2fs: use generic EFSBADCRC/EFSCORRUPTED

2019-10-05 12:47:39 +02:00

data.c

f2fs: fix potential overflow

2020-01-17 19:45:52 +01:00

debug.c

f2fs: show available_nids in f2fs/status

2017-05-03 10:04:57 -07:00

dir.c

f2fs: fix to spread clear_cold_data()

2019-12-01 09:13:44 +01:00

extent_cache.c

f2fs: fix to check extent cache in f2fs_drop_extent_tree

2018-05-30 07:52:33 +02:00

f2fs.h

f2fs: use generic EFSBADCRC/EFSCORRUPTED

2019-10-05 12:47:39 +02:00

file.c

f2fs: fix potential overflow

2020-01-17 19:45:52 +01:00

gc.c

f2fs: fix to allow node segment for GC by ioctl path

2019-12-17 20:38:12 +01:00

gc.h

f2fs: fix potential overflow when adjusting GC cycle

2017-08-15 10:40:14 -07:00

hash.c

f2fs: check entire encrypted bigname when finding a dentry

2017-05-04 11:44:35 -04:00

inline.c

f2fs: use generic EFSBADCRC/EFSCORRUPTED

2019-10-05 12:47:39 +02:00

inode.c

f2fs: use generic EFSBADCRC/EFSCORRUPTED

2019-10-05 12:47:39 +02:00

Kconfig

…

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

namei.c

f2fs: fix to update dir's i_pino during cross_rename

2020-01-04 13:59:41 +01:00

node.c

f2fs: use generic EFSBADCRC/EFSCORRUPTED

2019-10-05 12:47:39 +02:00

node.h

f2fs: simplify the way of calulating next nat address

2017-07-04 02:11:34 -07:00

recovery.c

f2fs: mark inode dirty explicitly in recover_inode()

2019-11-20 18:00:45 +01:00

segment.c

f2fs: fix to spread clear_cold_data()

2019-12-01 09:13:44 +01:00

segment.h

f2fs: use generic EFSBADCRC/EFSCORRUPTED

2019-10-05 12:47:39 +02:00

shrinker.c

f2fs: fix sbi->extent_list corruption issue

2019-02-12 19:46:08 +01:00

super.c

f2fs: code cleanup for f2fs_statfs_project()

2020-02-14 16:32:12 -05:00

sysfs.c

f2fs: fix memleak of kobject

2020-02-28 16:36:05 +01:00

trace.c

f2fs: do not use mutex lock in atomic context

2019-04-05 22:31:27 +02:00

trace.h

…

xattr.c

f2fs: sanity check of xattr entry size

2020-05-20 08:17:03 +02:00

xattr.h

f2fs: guard macro variables with braces

2017-04-10 19:48:10 -07:00