in ext4fs_read_file, it is possible for a broken/malicious file system to cause a memcpy of a negative number of bytes, which overflows all memory. This patch fixes the issue by checking for a negative length. Signed-off-by: Paul Emge <paulemge@forallsecure.com> |
||
---|---|---|
.. | ||
btrfs | ||
cbfs | ||
cramfs | ||
ext4 | ||
fat | ||
jffs2 | ||
reiserfs | ||
sandbox | ||
ubifs | ||
yaffs2 | ||
zfs | ||
fs_internal.c | ||
fs.c | ||
Kconfig | ||
Makefile |