Stian Skjelstad 58bc6d1be2 udf_get_extendedattr() had no boundary checks. ...

When parsing the ExtendedAttr data, malicous or corrupt attribute length
could cause kernel hangs and buffer overruns in some special cases.

Link: https://lore.kernel.org/r/20210822093332.25234-1-stian.skjelstad@gmail.com
Signed-off-by: Stian Skjelstad <stian.skjelstad@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>

2021-08-23 13:35:19 +02:00

..

balloc.c

treewide: Remove uninitialized_var() usage

2020-07-16 12:35:15 -07:00

dir.c

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

directory.c

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

ecma_167.h

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

file.c

mm: require ->set_page_dirty to be explicitly wired up

2021-06-29 10:53:48 -07:00

ialloc.c

inode: make init and permission helpers idmapped mount aware

2021-01-24 14:27:16 +01:00

inode.c

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

Kconfig

…

lowlevel.c

udf: stop using ioctl_by_bdev

2020-05-04 10:13:42 -06:00

Makefile

…

misc.c

udf_get_extendedattr() had no boundary checks.

2021-08-23 13:35:19 +02:00

namei.c

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

osta_udf.h

udf: Get rid of 0-length arrays

2021-08-11 16:54:44 +02:00

partition.c

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

super.c

udf: Fix iocharset=utf8 mount option

2021-08-12 16:07:09 +02:00

symlink.c

fs: make helpers idmap mount aware

2021-01-24 14:27:20 +01:00

truncate.c

…

udf_i.h

udf: Remove pointless union in udf_inode_info

2020-09-29 17:21:54 +02:00

udf_sb.h

udf: Fix iocharset=utf8 mount option

2021-08-12 16:07:09 +02:00

udfdecl.h

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

udfend.h

…

udftime.c

…

unicode.c

udf: Fix iocharset=utf8 mount option

2021-08-12 16:07:09 +02:00