diff options
| author | Phillip Lougher <phillip@squashfs.org.uk> | 2013-09-03 04:21:52 +0100 |
|---|---|---|
| committer | Phillip Lougher <phillip@squashfs.org.uk> | 2013-09-06 04:57:53 +0100 |
| commit | 52e9ce1c0f2060661e147ffaf701a17f2fc0a153 (patch) | |
| tree | f2aab5b8acc99d967bc507da019e95f6ded80292 /fs/squashfs/dir.c | |
| parent | 9dbc41d5d371cb10099c8182552f3915920e69b6 (diff) | |
| download | op-kernel-dev-52e9ce1c0f2060661e147ffaf701a17f2fc0a153.zip op-kernel-dev-52e9ce1c0f2060661e147ffaf701a17f2fc0a153.tar.gz | |
Squashfs: fix corruption checks in squashfs_lookup()
The dir_count and size fields when read from disk are sanity
checked for correctness. However, the sanity checks only check the
values are not greater than expected. As dir_count and size were
incorrectly defined as signed ints, this can lead to corrupted values
appearing as negative which are not trapped.
Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>
Diffstat (limited to 'fs/squashfs/dir.c')
0 files changed, 0 insertions, 0 deletions
