libblkid: f2fs: ensure checksum offset is within superblock

Signed-off-by: Thomas Weißschuh <thomas@t-8ch.de>

diff --git a/libblkid/src/superblocks/f2fs.c b/libblkid/src/superblocks/f2fs.c
index 65384b9f73e478bb43580265dfbb21ef3678c3b9..3a2924d9105e041bc7246d1ec49a352df51f66cc 100644 (file)
--- a/libblkid/src/superblocks/f2fs.c
+++ b/libblkid/src/superblocks/f2fs.c
@@ -62,6 +62,8 @@ static int f2fs_validate_checksum(blkid_probe pr, size_t sb_off,
        uint32_t csum_off = le32_to_cpu(sb->checksum_offset);
        if (!csum_off)
                return 1;
+       if (csum_off + sizeof(uint32_t) > 4096)
+               return 0;
 
        unsigned char *csum_data = blkid_probe_get_buffer(pr,
                        sb_off + csum_off, sizeof(uint32_t));