Files
linux/fs/ubifs
Silvio Cesare 9c3a27c0ca UBIFS: Fix potential integer overflow in allocation
commit 353748a359 upstream.

There is potential for the size and len fields in ubifs_data_node to be
too large causing either a negative value for the length fields or an
integer overflow leading to an incorrect memory allocation. Likewise,
when the len field is small, an integer underflow may occur.

Signed-off-by: Silvio Cesare <silvio.cesare@gmail.com>
Fixes: 1e51764a3c ("UBIFS: add new flash file system")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-03 11:21:32 +02:00
..
2012-08-31 17:32:58 +03:00
2016-11-10 16:36:33 +01:00
2016-07-27 09:47:31 -07:00
2015-03-25 11:08:41 +02:00
2015-03-25 11:08:41 +02:00
2015-03-25 11:08:41 +02:00