Jan Kara 64d4ce8923 ext4: fix ext4_empty_dir() for directories with holes
Function ext4_empty_dir() doesn't correctly handle directories with
holes and crashes on bh->b_data dereference when bh is NULL. Reorganize
the loop to use 'offset' variable all the times instead of comparing
pointers to current direntry with bh->b_data pointer. Also add more
strict checking of '.' and '..' directory entries to avoid entering loop
in possibly invalid state on corrupted filesystems.

References: CVE-2019-19037
CC: stable@vger.kernel.org
Fixes: 4e19d6b65fb4 ("ext4: allow directory holes")
Signed-off-by: Jan Kara <jack@suse.cz>
Link: https://lore.kernel.org/r/20191202170213.4761-2-jack@suse.cz
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
2019-12-14 17:22:45 -05:00
..
2019-11-05 16:21:09 -05:00
2019-11-05 16:21:09 -05:00
2019-11-14 19:25:47 -05:00
2019-11-19 12:25:42 -05:00
2019-08-12 19:33:50 -07:00
2018-09-15 17:11:25 -04:00
2019-11-19 12:25:42 -05:00
2019-08-12 19:33:50 -07:00
2019-08-12 19:33:50 -07:00