summaryrefslogtreecommitdiffstats
path: root/fs/reiserfs
diff options
context:
space:
mode:
authorAlden Tondettar <alden.tondettar@gmail.com>2016-04-25 19:27:56 -0700
committerJan Kara <jack@suse.cz>2016-04-26 08:25:07 +0200
commita47241cdeee2689ee7089ec95cadfcf66588fbdb (patch)
tree78565c734b29f102c1d1350f71aae947cda8593e /fs/reiserfs
parentc26f6c61578852f679787d555e6d07804e1f5f14 (diff)
downloadlinux-stable-a47241cdeee2689ee7089ec95cadfcf66588fbdb.tar.gz
linux-stable-a47241cdeee2689ee7089ec95cadfcf66588fbdb.tar.bz2
linux-stable-a47241cdeee2689ee7089ec95cadfcf66588fbdb.zip
udf: Prevent stack overflow on corrupted filesystem mount
Presently, a corrupted or malicious UDF filesystem containing a very large number (or cycle) of Logical Volume Integrity Descriptor extent indirections may trigger a stack overflow and kernel panic in udf_load_logicalvolint() on mount. Replace the unnecessary recursion in udf_load_logicalvolint() with simple iteration. Set an arbitrary limit of 1000 indirections (which would have almost certainly overflowed the stack without this fix), and treat such cases as if there were no LVID. Signed-off-by: Alden Tondettar <alden.tondettar@gmail.com> Signed-off-by: Jan Kara <jack@suse.cz>
Diffstat (limited to 'fs/reiserfs')
0 files changed, 0 insertions, 0 deletions