android_kernel_google_msm/block/partitions
Kees Cook 34a906cd9f mac: validate mac_partition is within sector
commit 02e2a5bfebe99edcf9d694575a75032d53fe1b73 upstream.

If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single
512 byte sector would be read (secsize / 512). However the partition
structure would be located past the end of the buffer (secsize % 512).

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Jens Axboe <axboe@fb.com>
Signed-off-by: Zefan Li <lizefan@huawei.com>
2016-10-26 23:15:32 +08:00
..
acorn.c
acorn.h
amiga.c
amiga.h
atari.c
atari.h
check.c
check.h
efi.c
efi.h
ibm.c
ibm.h
karma.c
karma.h
Kconfig
ldm.c LDM: Fix reassembly of extended VBLKs. 2012-02-24 09:37:42 +00:00
ldm.h
mac.c mac: validate mac_partition is within sector 2016-10-26 23:15:32 +08:00
mac.h
Makefile
msdos.c
msdos.h
osf.c
osf.h
sgi.c
sgi.h
sun.c
sun.h
sysv68.c
sysv68.h
ultrix.c
ultrix.h