]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
jffs2: Prevent rtime decompress memory corruption
authorKinsey Moore <kinsey.moore@oarcorp.com>
Tue, 23 Jul 2024 20:58:05 +0000 (15:58 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 14 Dec 2024 19:04:14 +0000 (20:04 +0100)
commitdc39b08fcc3831b0bc46add91ba93cd2aab50716
tree18010172a613d620e8567c33c95d8c8e203dd922
parent547b7f8fdebc77c0ff50c66d7fa2038d73a59ab6
jffs2: Prevent rtime decompress memory corruption

commit fe051552f5078fa02d593847529a3884305a6ffe upstream.

The rtime decompression routine does not fully check bounds during the
entirety of the decompression pass and can corrupt memory outside the
decompression buffer if the compressed data is corrupted. This adds the
required check to prevent this failure mode.

Cc: stable@vger.kernel.org
Signed-off-by: Kinsey Moore <kinsey.moore@oarcorp.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/jffs2/compr_rtime.c