linux

iv/linux

History

Kees Cook a77141a063 ovl: Use "buf" flexible array for memcpy() destination

commit cf8aa9bf97cadf85745506c6a3e244b22c268d63 upstream.

The "buf" flexible array needs to be the memcpy() destination to avoid
false positive run-time warning from the recent FORTIFY_SOURCE
hardening:

  memcpy: detected field-spanning write (size 93) of single field "&fh->fb"
  at fs/overlayfs/export.c:799 (size 21)

Reported-by: syzbot+9d14351a171d0d1c7955@syzkaller.appspotmail.com
Link: https://lore.kernel.org/all/000000000000763a6c05e95a5985@google.com/
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-02-09 11:26:47 +01:00

copy_up.c

ovl: fail on invalid uid/gid mapping at copy up

2023-02-01 08:27:24 +01:00

dir.c

ovl: Use ovl mounter's fsuid and fsgid in ovl_link()

2023-01-12 11:58:46 +01:00

export.c

ovl: Use "buf" flexible array for memcpy() destination

2023-02-09 11:26:47 +01:00

file.c

ovl: remove privs in ovl_fallocate()