android_kernel_google_msm/fs/udf
Jan Kara 7e7154ffc2 udf: Check component length before reading it
commit e237ec37ec154564f8690c5bd1795339955eeef9 upstream.

Check that length specified in a component of a symlink fits in the
input buffer we are reading. Also properly ignore component length for
component types that do not use it. Otherwise we read memory after end
of buffer for corrupted udf image.

Reported-by: Carl Henrik Lunde <chlunde@ping.uio.no>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Zefan Li <lizefan@huawei.com>
2015-04-14 17:33:48 +08:00
..
balloc.c udf: Fix handling of i_blocks 2012-02-29 21:53:47 +01:00
dir.c udf: Check path length when reading symlink 2015-04-14 17:33:48 +08:00
directory.c
ecma_167.h
file.c udf: Fix data corruption for files in ICB 2012-09-14 10:00:32 -07:00
ialloc.c udf: Init/maintain file entry checkpoint field 2012-02-29 21:53:46 +01:00
inode.c udf: Verify i_size when loading inode 2015-04-14 17:33:47 +08:00
Kconfig
lowlevel.c
Makefile
misc.c
namei.c udf: Check path length when reading symlink 2015-04-14 17:33:48 +08:00
osta_udf.h
partition.c
super.c udf: fix retun value on error path in udf_load_logicalvol 2012-10-13 05:39:00 +09:00
symlink.c udf: Check component length before reading it 2015-04-14 17:33:48 +08:00
truncate.c
udf_i.h udf: Init/maintain file entry checkpoint field 2012-02-29 21:53:46 +01:00
udf_sb.h udf: Fix bitmap overflow on large filesystems with small block size 2013-03-28 12:12:27 -07:00
udfdecl.h udf: Check path length when reading symlink 2015-04-14 17:33:48 +08:00
udfend.h
udftime.c
unicode.c udf: Check path length when reading symlink 2015-04-14 17:33:48 +08:00