]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ext4: prevent creating duplicate encrypted filenames
authorEric Biggers <ebiggers@google.com>
Mon, 28 Dec 2020 19:12:09 +0000 (11:12 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 6 Jan 2021 13:44:58 +0000 (14:44 +0100)
commitabd561e51a2a36eca2f1858b95ccaa613637d162
treece43746bf58040b491ffa350ce1eeeae69670b6f
parent1227ffc9d73d78e036f6f166fbdaf7dfe4c7b88b
ext4: prevent creating duplicate encrypted filenames

commit 75d18cd1868c2aee43553723872c35d7908f240f upstream.

As described in "fscrypt: add fscrypt_is_nokey_name()", it's possible to
create a duplicate filename in an encrypted directory by creating a file
concurrently with adding the directory's encryption key.

Fix this bug on ext4 by rejecting no-key dentries in ext4_add_entry().

Note that the duplicate check in ext4_find_dest_de() sometimes prevented
this bug.  However in many cases it didn't, since ext4_find_dest_de()
doesn't examine every dentry.

Fixes: 4461471107b7 ("ext4 crypto: enable filename encryption")
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/20201118075609.120337-3-ebiggers@kernel.org
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ext4/namei.c