diff options
| author | Phillip Lougher <phillip@squashfs.org.uk> | 2013-09-03 05:38:43 +0200 |
|---|---|---|
| committer | Phillip Lougher <phillip@squashfs.org.uk> | 2013-09-06 05:57:53 +0200 |
| commit | 68e7f412370ecfeb1bd667d0d174fad34517516e (patch) | |
| tree | 60d41e9366a38c45f836cf72403b6495e3763f4a /fs/nfs/client.c | |
| parent | Squashfs: fix corruption checks in squashfs_lookup() (diff) | |
| download | linux-68e7f412370ecfeb1bd667d0d174fad34517516e.tar.xz linux-68e7f412370ecfeb1bd667d0d174fad34517516e.zip | |
Squashfs: fix corruption checks in squashfs_readdir()
The dir_count and size fields when read from disk are sanity
checked for correctness. However, the sanity checks only check the
values are not greater than expected. As dir_count and size were
incorrectly defined as signed ints, this can lead to corrupted values
appearing as negative which are not trapped.
Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>
Diffstat (limited to 'fs/nfs/client.c')
0 files changed, 0 insertions, 0 deletions