android_kernel_samsung_msm8976/fs/isofs
Jan Kara 1fe5620fcd isofs: Fix infinite looping over CE entries
commit f54e18f1b831c92f6512d2eedb224cd63d607d3d upstream.

Rock Ridge extensions define so called Continuation Entries (CE) which
define where is further space with Rock Ridge data. Corrupted isofs
image can contain arbitrarily long chain of these, including a one
containing loop and thus causing kernel to end in an infinite loop when
traversing these entries.

Limit the traversal to 32 entries which should be more than enough space
to store all the Rock Ridge data.

Reported-by: P J P <ppandit@redhat.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-01-08 09:58:15 -08:00
..
compress.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
dir.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
export.c fs: encode_fh: return FILEID_INVALID if invalid fid_type 2013-02-26 02:46:10 -05:00
inode.c isofs: Fix unbounded recursion when processing relocated directories 2014-09-05 16:28:34 -07:00
isofs.h isofs: Fix unbounded recursion when processing relocated directories 2014-09-05 16:28:34 -07:00
joliet.c
Kconfig
Makefile
namei.c stop passing nameidata to ->lookup() 2012-07-14 16:34:32 +04:00
rock.c isofs: Fix infinite looping over CE entries 2015-01-08 09:58:15 -08:00
rock.h
util.c
zisofs.h