tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

ntfs: check $EA query-length in ntfs_ea_get

if ea_info_qlen exceeds all_ea_size, OOB can happen.

Signed-off-by: Hyunchul Lee <hyc.lee@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>

authored by

Hyunchul Lee and committed by
Namjae Jeon 10993e52 a5325419

+5
+5
fs/ntfs/ea.c
··· 136 136 if (!ea_buf) 137 137 return -ENODATA; 138 138 139 + if (ea_info_qlen > all_ea_size) { 140 + err = -EIO; 141 + goto free_ea_buf; 142 + } 143 + 139 144 err = ntfs_ea_lookup(ea_buf, ea_info_qlen, name, name_len, &ea_off, 140 145 &ea_size); 141 146 if (!err) {