OSDN Git Service

Cramfs: fix abad comparison when wrap-arounds occur
authorNicolas Pitre <nicolas.pitre@linaro.org>
Tue, 30 Oct 2018 17:26:15 +0000 (13:26 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 13 Nov 2018 19:08:55 +0000 (11:08 -0800)
commit9d9da6fe1f018669a0abd9d94f3810de5798a161
treeea3dbb1511059005b4ff6a4002e51e26a5fe7cb5
parent9632c0339b1217e280f693161498c3152c9c7bb3
Cramfs: fix abad comparison when wrap-arounds occur

commit 672ca9dd13f1aca0c17516f76fc5b0e8344b3e46 upstream.

It is possible for corrupted filesystem images to produce very large
block offsets that may wrap when a length is added, and wrongly pass
the buffer size test.

Reported-by: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
Signed-off-by: Nicolas Pitre <nico@linaro.org>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/cramfs/inode.c