linux/fs/ubifs
Silvio Cesare 353748a359 UBIFS: Fix potential integer overflow in allocation
There is potential for the size and len fields in ubifs_data_node to be
too large causing either a negative value for the length fields or an
integer overflow leading to an incorrect memory allocation. Likewise,
when the len field is small, an integer underflow may occur.

Signed-off-by: Silvio Cesare <silvio.cesare@gmail.com>
Fixes: 1e51764a3c ("UBIFS: add new flash file system")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
2018-06-12 16:19:22 -07:00
..
budget.c UBIFS: extend debug/message capabilities 2015-03-25 11:08:41 +02:00
commit.c UBIFS: extend debug/message capabilities 2015-03-25 11:08:41 +02:00
compress.c UBIFS: extend debug/message capabilities 2015-03-25 11:08:41 +02:00
crypto.c fscrypt: make fscrypt_operations.max_namelen an integer 2018-05-20 16:21:03 -04:00
debug.c ubifs: Fix cut and paste error on sb type comparisons 2017-05-08 20:48:41 +02:00
debug.h UBIFS: print less 2012-08-31 17:32:58 +03:00
dir.c ubifs_lookup: use d_splice_alias() 2018-05-22 14:27:54 -04:00
file.c fs: ubifs: Adding new return type vm_fault_t 2018-06-07 15:53:13 +02:00
find.c ubifs: Constify struct ubifs_lprops in scan_for_leb_for_idx 2018-04-04 23:48:10 +02:00
gc.c ubifs: gc: Fix typo 2018-06-07 15:53:15 +02:00
io.c Rename superblock flags (MS_xyz -> SB_xyz) 2017-11-27 13:05:09 -08:00
ioctl.c fs, fscrypt: add an S_ENCRYPTED inode flag 2017-10-18 19:52:36 -04:00
journal.c UBIFS: Fix potential integer overflow in allocation 2018-06-12 16:19:22 -07:00
Kconfig ubifs: Add CONFIG_UBIFS_FS_SECURITY to disable/enable security labels 2017-05-08 20:48:23 +02:00
key.h ubifs: Add assert to dent_key_init() 2017-07-14 22:49:06 +02:00
log.c ubifs: log: Some spelling fixes 2018-06-07 15:53:15 +02:00
lprops.c ubifs: Remove useless parameter of lpt_heap_replace 2018-04-04 23:48:11 +02:00
lpt_commit.c ubifs: lpt: Fix wrong pnode number range in comment 2018-06-07 15:53:15 +02:00
lpt.c UBIFS: use kmemdup rather than duplicating its implementation 2015-10-03 20:03:14 +02:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
master.c UBIFS: extend debug/message capabilities 2015-03-25 11:08:41 +02:00
misc.c License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
misc.h fs: ubifs: replace CURRENT_TIME_SEC with current_time 2017-05-08 17:15:15 -07:00
orphan.c UBIFS: extend debug/message capabilities 2015-03-25 11:08:41 +02:00
recovery.c ubifs: Remove unnecessary assignment 2017-05-08 20:48:47 +02:00
replay.c ubifs: Spelling fix someting -> something 2018-06-07 15:53:14 +02:00
sb.c fs: ubifs: replace CURRENT_TIME_SEC with current_time 2017-05-08 17:15:15 -07:00
scan.c ubifs: remove unnecessary assignment 2018-04-04 23:48:10 +02:00
shrinker.c UBIFS: Remove incorrect assertion in shrink_tnc() 2014-06-02 11:28:24 +03:00
super.c ubifs: Check ubifs_wbuf_sync() return code 2018-04-04 23:41:44 +02:00
tnc_commit.c ubifs: Fail commit if TNC is obviously inconsistent 2017-07-14 22:49:07 +02:00
tnc_misc.c UBIFS: extend debug/message capabilities 2015-03-25 11:08:41 +02:00
tnc.c ubifs: Fix uninitialized variable in search_dh_cookie() 2018-01-17 19:28:53 +01:00
ubifs-media.h ubifs: Raise write version to 5 2016-12-12 23:07:38 +01:00
ubifs.h ubifs: remove set but never used variable 2018-06-07 15:53:14 +02:00
xattr.c ubifs, xattr: remove misguided quota flags 2018-06-07 15:53:14 +02:00