Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 0568a4ff authored by Theodore Ts'o's avatar Theodore Ts'o Committed by Srinivasa Rao Kuppala
Browse files

ext4: verify the depth of extent tree in ext4_find_extent()

If there is a corupted file system where the claimed depth of the
extent tree is -1, this can cause a massive buffer overrun leading to
sadness.

This addresses CVE-2018-10877.

https://bugzilla.kernel.org/show_bug.cgi?id=199417



Signed-off-by: default avatarTheodore Ts'o <tytso@mit.edu>
Cc: stable@kernel.org
Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git


Git-commit: bc890a60247171294acc0bd67d211fa4b88d40ba
Signed-off-by: default avatarSrinivasa Rao Kuppala <srkupp@codeaurora.org>
Change-Id: I9f899cc3e34655ae6b80a3d2720a6a91a43b749f
parent 9591eb26
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment