86d4aedcbc
commit e96a1866b40570b5950cda8602c2819189c62a48 upstream. When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it. Reported-and-tested-by: syzbot+6fc7fb214625d82af7d1@syzkaller.appspotmail.com CC: stable@vger.kernel.org Signed-off-by: Jan Kara <jack@suse.cz> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
---|---|---|
.. | ||
compress.c | ||
dir.c | ||
export.c | ||
inode.c | ||
isofs.h | ||
joliet.c | ||
Kconfig | ||
Makefile | ||
namei.c | ||
rock.c | ||
rock.h | ||
util.c | ||
zisofs.h |