diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2018-09-06 12:47:51 +0300 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2018-09-12 09:27:57 -0500 |
| commit | 8ad8aa353524d89fa2e09522f3078166ff78ec42 (patch) | |
| tree | c95029b8a3efc9cdfbb70b9d666812c44ff18b17 /fs/ioctl.c | |
| parent | 5890184d2b506f88886b7322d7d44464453bd3a6 (diff) | |
| download | linux-8ad8aa353524d89fa2e09522f3078166ff78ec42.tar.gz linux-8ad8aa353524d89fa2e09522f3078166ff78ec42.tar.bz2 linux-8ad8aa353524d89fa2e09522f3078166ff78ec42.zip | |
cifs: prevent integer overflow in nxt_dir_entry()
The "old_entry + le32_to_cpu(pDirInfo->NextEntryOffset)" can wrap
around so I have added a check for integer overflow.
Reported-by: Dr Silvio Cesare of InfoSect <silvio.cesare@gmail.com>
Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com>
Reviewed-by: Aurelien Aptel <aaptel@suse.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
CC: Stable <stable@vger.kernel.org>
Diffstat (limited to 'fs/ioctl.c')
0 files changed, 0 insertions, 0 deletions