mirror of
https://github.com/torvalds/linux.git
synced 2026-04-18 06:44:00 -04:00
Merge tag 'affs-for-7.1-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
Pull AFFS fix from David Sterba: "There's a potential out-of-bounds read in the directory hash table during readdir" * tag 'affs-for-7.1-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux: affs: bound hash_pos before table lookup in affs_readdir
This commit is contained in:
@@ -119,6 +119,8 @@ affs_readdir(struct file *file, struct dir_context *ctx)
|
||||
pr_debug("readdir() left off=%d\n", ino);
|
||||
goto inside;
|
||||
}
|
||||
if (hash_pos >= AFFS_SB(sb)->s_hashsize)
|
||||
goto done;
|
||||
|
||||
ino = be32_to_cpu(AFFS_HEAD(dir_bh)->table[hash_pos]);
|
||||
for (i = 0; ino && i < chain_pos; i++) {
|
||||
|
||||
Reference in New Issue
Block a user