diff options
author | Kees Cook <keescook@chromium.org> | 2015-11-19 17:18:54 -0800 |
---|---|---|
committer | Jens Axboe <axboe@fb.com> | 2015-11-20 08:49:28 -0700 |
commit | 02e2a5bfebe99edcf9d694575a75032d53fe1b73 (patch) | |
tree | 815d3e15f91df416bdabd567d11f3983fa48f383 /block/blk-ioc.c | |
parent | 8aeea03195ee6e33fcb00039c414eabfc37a4eb8 (diff) | |
download | lwn-02e2a5bfebe99edcf9d694575a75032d53fe1b73.tar.gz lwn-02e2a5bfebe99edcf9d694575a75032d53fe1b73.zip |
mac: validate mac_partition is within sector
If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single
512 byte sector would be read (secsize / 512). However the partition
structure would be located past the end of the buffer (secsize % 512).
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Jens Axboe <axboe@fb.com>
Diffstat (limited to 'block/blk-ioc.c')
0 files changed, 0 insertions, 0 deletions