]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0625c6e) | patch
f2fs: check memory boundary by insane namelen
authorJaegeuk Kim <jaegeuk@kernel.org>
Wed, 14 Nov 2018 20:40:30 +0000 (12:40 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Aug 2020 08:52:53 +0000 (10:52 +0200)
commit11a6e8f89521d8ba212205b7c446f5ca65a946ee
treef758ef283d59a076e833fdf5b70d1204851077dbtree
parent0625c6e8d091438d3bd79c3e4e0d2ae367d0d14fcommit | diff
f2fs: check memory boundary by insane namelen

[ Upstream commit 4e240d1bab1ead280ddf5eb05058dba6bbd57d10 ]

If namelen is corrupted to have very long value, fill_dentries can copy
wrong memory area.

Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/f2fs/dir.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git