diff options
author | Duane Griffin <duaneg@dghda.com> | 2008-07-25 01:46:31 -0700 |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2008-07-25 10:53:33 -0700 |
commit | 275c0a8f1253a7542ad9726956c918d8a1f694c4 (patch) | |
tree | 775834cb708749217f56523b9517aba700978409 /drivers/memstick | |
parent | cbe5f466f6995e10a10c7ae66d6dc8608f08a6b8 (diff) | |
download | op-kernel-dev-275c0a8f1253a7542ad9726956c918d8a1f694c4.zip op-kernel-dev-275c0a8f1253a7542ad9726956c918d8a1f694c4.tar.gz |
ext3: validate directory entry data before use
ext3_dx_find_entry uses ext3_next_entry without verifying that the entry
is valid. If its rec_len == 0 this causes an infinite loop. Refactor the
loop to check the validity of entries before checking whether they match
and moving onto the next one.
There are other uses of ext3_next_entry in this file which also look
problematic. They should be reviewed and fixed if/when we have a
test-case that triggers them.
This patch fixes the first case (image hdb.25.softlockup.gz) reported in
http://bugzilla.kernel.org/show_bug.cgi?id=10882.
Signed-off-by: Duane Griffin <duaneg@dghda.com>
Cc: <linux-ext4@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'drivers/memstick')
0 files changed, 0 insertions, 0 deletions