diff options
author | Phillip Lougher <phillip@lougher.demon.co.uk> | 2011-05-24 04:33:34 +0100 |
---|---|---|
committer | Phillip Lougher <phillip@lougher.demon.co.uk> | 2011-05-25 18:21:33 +0100 |
commit | 1cac63cc9b2ff0d16ab2d16232b1a6ee8676a47b (patch) | |
tree | 31ee36dac4a1b351c153058ffa0799a959ba0272 /lib/inflate.c | |
parent | ac51a0a7139aa93bf1176b701c86fa3d2bdf6106 (diff) | |
download | lwn-1cac63cc9b2ff0d16ab2d16232b1a6ee8676a47b.tar.gz lwn-1cac63cc9b2ff0d16ab2d16232b1a6ee8676a47b.zip |
Squashfs: add sanity checks to fragment reading at mount time
Fsfuzzer generates corrupted filesystems which throw a warn_on in
kmalloc. One of these is due to a corrupted superblock fragments field.
Fix this by checking that the number of bytes to be read (and allocated)
does not extend into the next filesystem structure.
Also add a couple of other sanity checks of the mount-time fragment table
structures.
Signed-off-by: Phillip Lougher <phillip@lougher.demon.co.uk>
Diffstat (limited to 'lib/inflate.c')
0 files changed, 0 insertions, 0 deletions