diff options
| author | Gao Xiang <hsiangkao@redhat.com> | 2020-09-22 09:41:06 -0700 |
|---|---|---|
| committer | Darrick J. Wong <darrick.wong@oracle.com> | 2020-09-23 08:58:52 -0700 |
| commit | f692d09e9c8fd0f5557c2e87f796a16dd95222b8 (patch) | |
| tree | 90190165b7b714a83a53fdf69f3fc2c976850c7c /fs/xfs/xfs_filestream.c | |
| parent | 384ff09ba2e5170a0eec8d4af57065a47c3f8ef2 (diff) | |
| download | linux-riscv-f692d09e9c8fd0f5557c2e87f796a16dd95222b8.tar.gz linux-riscv-f692d09e9c8fd0f5557c2e87f796a16dd95222b8.tar.bz2 linux-riscv-f692d09e9c8fd0f5557c2e87f796a16dd95222b8.zip | |
xfs: avoid LR buffer overrun due to crafted h_len
Currently, crafted h_len has been blocked for the log
header of the tail block in commit a70f9fe52daa ("xfs:
detect and handle invalid iclog size set by mkfs").
However, each log record could still have crafted h_len
and cause log record buffer overrun. So let's check
h_len vs buffer size for each log record as well.
Signed-off-by: Gao Xiang <hsiangkao@redhat.com>
Reviewed-by: Darrick J. Wong <darrick.wong@oracle.com>
Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
Reviewed-by: Brian Foster <bfoster@redhat.com>
Diffstat (limited to 'fs/xfs/xfs_filestream.c')
0 files changed, 0 insertions, 0 deletions