Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 4fed250b authored by Phillip Lougher's avatar Phillip Lougher Committed by Mohamad Ayyash
Browse files

Squashfs: add corruption check in get_dir_index_using_offset()



We read the size (of the name) field from disk.  This value should
be sanity checked for correctness to avoid blindly reading
huge amounts of unnecessary data from disk on corruption.

Note, here we're not actually reading the name into a buffer, but
skipping it, and so corruption doesn't cause buffer overflow, merely
lots of unnecessary amounts of data to be read.

Signed-off-by: default avatarPhillip Lougher <phillip@squashfs.org.uk>
parent 4ff8d316
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment