Theodore Ts'o 779af00b3f ext4: avoid arithemetic overflow that can trigger a BUG ...

commit bcd8e91f98 upstream.

A maliciously crafted file system can cause an overflow when the
results of a 64-bit calculation is stored into a 32-bit length
parameter.

https://bugzilla.kernel.org/show_bug.cgi?id=200623

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Reported-by: Wen Xu <wen.xu@gatech.edu>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-09-29 03:06:06 -07:00

178 KiB

Raw Blame History

View Raw