iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs
History
Volodymyr G. Lukiianyk f4cfb18d79 uclinux: fix gzip header parsing in binfmt_flat.c 
There are off-by-one errors in decompress_exec() when calculating the length of
optional "original file name" and "comment" fields: the "ret" index is not
incremented when terminating '\0' character is reached. The check of the buffer
overflow (after an "extra-field" length was taken into account) is also fixed.

I've encountered this off-by-one error when tried to reuse
gzip-header-parsing part of the decompress_exec() function.  There was an
"original file name" field in the payload (with miscalculated length) and
zlib_inflate() returned Z_DATA_ERROR.  But after the fix similar to this
one all worked fine.

Signed-off-by: Volodymyr G Lukiianyk <volodymyrgl@gmail.com>
Acked-by: Greg Ungerer <gerg@snapgear.com>
Acked-by: David Howells <dhowells@redhat.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-10-16 11:21:29 -07:00
..
9p
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
adfs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
affs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
afs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
autofs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
autofs4
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
befs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
bfs
bfs: fix Lockdep warning
2008-09-13 14:41:51 -07:00
cifs
[CIFS] cifs: remove pointless lock and unlock of GlobalMid_Lock in header_assemble
2008-10-12 13:34:11 +00:00
coda
[PATCH] sanitize __user_walk_fd() et.al.
2008-07-26 20:53:34 -04:00
configfs
[PATCH] configfs: Consolidate locking around configfs_detach_prep() in configfs_rmdir()
2008-08-22 11:09:02 -07:00
cramfs
cramfs: fix named-pipe handling
2008-08-20 15:40:32 -07:00
debugfs
integrity: special fs magic
2008-10-13 09:47:43 +11:00
devpts
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
dlm
dlm: choose better identifiers
2008-09-05 09:51:30 -05:00
ecryptfs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
efs
EFS: Don't set f_fsid in statfs().
2008-09-02 23:15:22 +01:00
exportfs
fs: replace remaining __FUNCTION__ occurrences
2008-04-30 08:29:54 -07:00
ext2
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
ext3
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
ext4
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
fat
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
freevxfs
fs/freevxfs/: proper externs
2008-04-29 08:06:00 -07:00
fuse
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
gfs2
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
hfs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
hfsplus
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
hostfs
[PATCH] sanitize ->permission() prototype
2008-07-26 20:53:14 -04:00
hpfs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
hppfs
[patch] hppfs: remove hppfs_permission
2008-07-26 20:53:07 -04:00
hugetlbfs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
isofs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
jbd
Merge branch 'core/locking' into core/urgent
2008-08-12 00:11:49 +02:00
jbd2
ext4: add an option to control error handling on file data
2008-10-10 22:12:43 -04:00
jffs2
removed unused #include <linux/version.h>'s
2008-08-23 12:14:12 -07:00
jfs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
lockd
NLM: Remove "proto" argument from lockd_up()
2008-10-04 17:12:27 -04:00
minix
SL*B: drop kmem cache argument from constructor
2008-07-26 12:00:07 -07:00
msdos
fatfs: add UTC timestamp option
2008-07-25 10:53:34 -07:00
ncpfs
[PATCH] don't pass nameidata to __ncp_lookup_validate()
2008-07-26 20:53:37 -04:00
nfs
Merge branch 'for-2.6.28' of git://linux-nfs.org/~bfields/linux
2008-10-14 12:31:14 -07:00
nfs_common
…
nfsd
NLM: Remove unused argument from svc_addsock() function
2008-10-04 17:12:27 -04:00
nls
sparse pointer use of zero as null
2007-10-18 14:37:31 -07:00
ntfs
NTFS: update homepage
2008-09-02 19:21:37 -07:00
ocfs2
ocfs2: fix build error
2008-10-14 18:31:46 -07:00
omfs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
openpromfs
SL*B: drop kmem cache argument from constructor
2008-07-26 12:00:07 -07:00
partitions
Check for device resize when rescanning partitions
2008-10-09 08:56:12 +02:00
proc
Merge branch 'for-2.6.28' of git://linux-nfs.org/~bfields/linux
2008-10-14 12:31:14 -07:00
qnx4
SL*B: drop kmem cache argument from constructor
2008-07-26 12:00:07 -07:00
ramfs
mm: tiny-shmem nommu fix
2008-10-02 15:53:13 -07:00
reiserfs
reiserfs: removed duplicated #include
2008-08-12 16:07:30 -07:00
romfs
romfs_readpage: don't report errors for pages beyond i_size
2008-07-30 14:30:34 -07:00
smbfs
[PATCH] sanitize ->permission() prototype
2008-07-26 20:53:14 -04:00
sysfs
Use WARN() in fs/sysfs
2008-07-26 12:00:07 -07:00
sysv
SL*B: drop kmem cache argument from constructor
2008-07-26 12:00:07 -07:00
ubifs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
udf
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
ufs
vfs: Use const for kernel parser table
2008-10-13 10:10:37 -07:00
vfat
fatfs: add UTC timestamp option
2008-07-25 10:53:34 -07:00
xfs
xfs: fix remount rw with unrecognized options
2008-10-15 10:00:00 -07:00
aio.c
[PATCH] f_count may wrap around
2008-07-26 20:53:40 -04:00
anon_inodes.c
flag parameters: NONBLOCK in anon_inode_getfd
2008-07-24 10:47:28 -07:00
attr.c
[patch 4/4] vfs: immutable inode checking cleanup
2008-07-26 20:53:28 -04:00
bad_inode.c
[PATCH] sanitize ->permission() prototype
2008-07-26 20:53:14 -04:00
binfmt_aout.c
tracehook: exec
2008-07-26 12:00:08 -07:00
binfmt_elf_fdpic.c
binfmt_elf_fdpic: Magical stack pointer index, for NEW_AUX_ENT compat.
2008-07-28 18:10:28 +09:00
binfmt_elf.c
tracehook: exec
2008-07-26 12:00:08 -07:00
binfmt_em86.c
binfmt_misc.c: avoid potential kernel stack overflow
2008-04-29 08:06:04 -07:00
binfmt_flat.c
uclinux: fix gzip header parsing in binfmt_flat.c
2008-10-16 11:21:29 -07:00
binfmt_misc.c
binfmt_misc: fix false -ENOEXEC when coupled with other binary handlers
2008-08-20 15:40:31 -07:00
binfmt_script.c
binfmt_misc.c: avoid potential kernel stack overflow
2008-04-29 08:06:04 -07:00
binfmt_som.c
tracehook: exec
2008-07-26 12:00:08 -07:00
bio-integrity.c
block: Introduce integrity data ownership flag
2008-10-09 08:56:21 +02:00
bio.c
block: mark bio_split_pool static
2008-10-09 08:57:05 +02:00
block_dev.c
block_dev: fix kernel-doc in new functions
2008-10-09 10:42:38 +02:00
buffer.c
block: submit_bh() inadvertently discards barrier flag on a sync write
2008-08-27 09:50:19 +02:00
char_dev.c
Remove the lock_kernel() call from chrdev_open()
2008-06-20 14:05:53 -06:00
compat_binfmt_elf.c
x86: compat_binfmt_elf
2008-01-30 13:31:46 +01:00
compat_ioctl.c
remove unused #include <linux/dirent.h>'s
2008-07-25 10:53:34 -07:00
compat.c
[PATCH] fix regular readdir() and friends
2008-08-25 01:18:08 -04:00
dcache.c
Fix NULL pointer dereference in proc_sys_compare
2008-09-29 07:42:57 -07:00
dcookies.c
d_path: Make d_path() use a struct path
2008-02-14 21:17:09 -08:00
direct-io.c
dio: use get_user_pages_fast
2008-07-26 12:00:06 -07:00
dnotify.c
[PATCH] split linux/file.h
2008-05-01 13:08:16 -04:00
dquot.c
tty: Redo current tty locking
2008-10-13 09:51:41 -07:00
drop_caches.c
vfs: skip inodes without pages to free in drop_pagecache_sb()
2008-04-29 08:06:05 -07:00
eventfd.c
flag parameters: check magic constants
2008-07-24 10:47:29 -07:00
eventpoll.c
fs/eventpoll.c: fix sys_epoll_create1() comment
2008-08-12 16:07:30 -07:00
exec.c
mm owner: fix race between swapoff and exit
2008-09-29 08:41:47 -07:00
fcntl.c
[PATCH] clean dup2() up a bit
2008-08-01 11:25:24 -04:00
fifo.c
[PATCH] reuse xxx_fifo_fops for xxx_pipe_fops
2008-07-26 20:53:06 -04:00
file_table.c
[PATCH] f_count may wrap around
2008-07-26 20:53:40 -04:00
file.c
[PATCH] merge locate_fd() and get_unused_fd()
2008-08-01 11:25:23 -04:00
filesystems.c
…
fs-writeback.c
VFS: export sync_sb_inodes
2008-07-14 19:10:52 +03:00
generic_acl.c
…
inode.c
fs/inode.c: properly init address_space->writeback_index
2008-08-15 08:35:44 -07:00
inotify_user.c
inotify: fix lock ordering wrt do_page_fault's mmap_sem
2008-10-02 15:53:13 -07:00
inotify.c
inotify: remove debug code
2008-02-06 10:41:07 -08:00
internal.h
[PATCH] move a bunch of declarations to fs/internal.h
2008-04-21 23:11:01 -04:00
ioctl.c
provide generic_block_fiemap() only with BLOCK=y
2008-10-12 11:44:37 -07:00
ioprio.c
fix setpriority(PRIO_PGRP) thread iterator breakage
2008-08-20 15:40:32 -07:00
Kconfig
Merge branch 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mfasheh/ocfs2
2008-10-14 16:34:11 -07:00
Kconfig.binfmt
Introduce HAVE_AOUT symbol to remove hard-coded arch list for BINFMT_AOUT
2008-09-06 19:30:22 +01:00
libfs.c
VFS: increase pseudo-filesystem block size to PAGE_SIZE
2008-07-30 09:41:44 -07:00
locks.c
SL*B: drop kmem cache argument from constructor
2008-07-26 12:00:07 -07:00
Makefile
Merge branch 'for-2.6.28' of git://linux-nfs.org/~bfields/linux
2008-10-14 12:31:14 -07:00
mbcache.c
vfs: fix possible deadlock in ext2, ext3, ext4 when using xattrs
2008-04-15 19:35:41 -07:00
mpage.c
vfs: add hooks for ext4's delayed allocation support
2008-07-11 19:27:31 -04:00
namei.c
[patch 3/4] vfs: remove unused nameidata argument of may_create()
2008-08-01 11:25:30 -04:00
namespace.c
[PATCH] pass struct path * to do_add_mount()
2008-08-01 11:25:32 -04:00
nfsctl.c
Introduce path_put()
2008-02-14 21:13:33 -08:00
no-block.c
…
open.c
tty: the vhangup syscall is racy
2008-10-13 09:51:41 -07:00
pipe.c
[PATCH] reuse xxx_fifo_fops for xxx_pipe_fops
2008-07-26 20:53:06 -04:00
pnode.c
[patch 7/7] vfs: mountinfo: show dominating group id
2008-04-23 00:05:09 -04:00
pnode.h
[patch 7/7] vfs: mountinfo: show dominating group id
2008-04-23 00:05:09 -04:00
posix_acl.c
…
quota_v1.c
quota: move function-macros from quota.h to quotaops.h
2008-07-25 10:53:35 -07:00
quota_v2.c
quota: move function-macros from quota.h to quotaops.h
2008-07-25 10:53:35 -07:00
quota.c
quota: cleanup loop in sync_dquots()
2008-07-25 10:53:35 -07:00
read_write.c
Remove BKL from remote_llseek v2
2008-07-02 15:06:27 -06:00
read_write.h
…
readdir.c
[PATCH] fix regular readdir() and friends
2008-08-25 01:18:08 -04:00
select.c
Fix performance regression on lmbench select benchmark
2008-06-22 12:23:15 -07:00
seq_file.c
[PATCH] deal with the first call of ->show() generating no output
2008-08-25 01:18:10 -04:00
signalfd.c
flag parameters: check magic constants
2008-07-24 10:47:29 -07:00
splice.c
Don't allow splice() to files opened with O_APPEND
2008-10-09 14:26:38 -07:00
stack.c
…
stat.c
[PATCH] sanitize __user_walk_fd() et.al.
2008-07-26 20:53:34 -04:00
super.c
fix soft lock up at NFS mount via per-SB LRU-list of unused dentries
2008-07-24 10:47:15 -07:00
sync.c
SYNC_FILE_RANGE_WRITE may and will block. Document that.
2008-07-24 10:47:17 -07:00
timerfd.c
flag parameters: check magic constants
2008-07-24 10:47:29 -07:00
utimes.c
[PATCH] sanitize __user_walk_fd() et.al.
2008-07-26 20:53:34 -04:00
xattr_acl.c
…
xattr.c
[PATCH] sanitize __user_walk_fd() et.al.
2008-07-26 20:53:34 -04:00