kernel-ark/fs/udf
Jan Kara 57b9655d01 udf: Improve table length check to avoid possible overflow
When a partition table length is corrupted to be close to 1 << 32, the
check for its length may overflow on 32-bit systems and we will think
the length is valid. Later on the kernel can crash trying to read beyond
end of buffer. Fix the check to avoid possible overflow.

CC: stable@vger.kernel.org
Reported-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Jan Kara <jack@suse.cz>
2012-07-10 18:02:17 +02:00
..
balloc.c udf: Fix handling of i_blocks 2012-02-29 21:53:47 +01:00
dir.c udf: Remove unnecessary bkl usages 2011-01-06 17:03:57 +01:00
directory.c udf: Neaten udf_debug uses 2011-10-31 23:43:58 +01:00
ecma_167.h
file.c udf: remove the second argument of k[un]map_atomic() 2012-03-20 21:48:26 +08:00
ialloc.c udf: Init/maintain file entry checkpoint field 2012-02-29 21:53:46 +01:00
inode.c UDF: Remove unnecessary variable "offset" from udf_fill_inode 2012-07-09 12:03:12 +02:00
Kconfig Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-udf-2.6 2011-01-11 14:45:52 -08:00
lowlevel.c udf: Neaten udf_debug uses 2011-10-31 23:43:58 +01:00
Makefile
misc.c udf: Rename udf_error to udf_err 2011-10-10 19:29:01 +02:00
namei.c ->encode_fh() API change 2012-05-29 23:28:33 -04:00
osta_udf.h
partition.c udf: Cleanup metadata flags handling 2011-10-31 23:49:48 +01:00
super.c udf: Improve table length check to avoid possible overflow 2012-07-10 18:02:17 +02:00
symlink.c udf: Treat symlink component of type 2 as / 2012-01-09 13:52:08 +01:00
truncate.c udf: Do not decrement i_blocks when freeing indirect extent block 2012-07-09 13:24:21 +02:00
udf_i.h udf: Init/maintain file entry checkpoint field 2012-02-29 21:53:46 +01:00
udf_sb.h udf: propagate umode_t 2012-01-03 22:55:08 -05:00
udfdecl.h udf: stop using s_dirt 2012-07-09 12:03:11 +02:00
udfend.h
udftime.c udf: Convert printks to pr_<level> 2011-10-31 23:43:52 +01:00
unicode.c udf: Convert printks to pr_<level> 2011-10-31 23:43:52 +01:00