summaryrefslogtreecommitdiffstats
path: root/fs/udf/file.c
diff options
context:
space:
mode:
authorJan Kara <jack@suse.cz>2014-09-04 14:06:55 +0200
committerJan Kara <jack@suse.cz>2014-09-04 14:12:29 +0200
commitc03aa9f6e1f938618e6db2e23afef0574efeeb65 (patch)
treeba1f7d3c1e99b262f43a1c2fa39aaf57701c664c /fs/udf/file.c
parentbb7720a0b4a8ca3269fd86fbb45a78d2e0d3deaf (diff)
downloadlinux-c03aa9f6e1f938618e6db2e23afef0574efeeb65.tar.gz
linux-c03aa9f6e1f938618e6db2e23afef0574efeeb65.tar.bz2
linux-c03aa9f6e1f938618e6db2e23afef0574efeeb65.zip
udf: Avoid infinite loop when processing indirect ICBs
We did not implement any bound on number of indirect ICBs we follow when loading inode. Thus corrupted medium could cause kernel to go into an infinite loop, possibly causing a stack overflow. Fix the possible stack overflow by removing recursion from __udf_read_inode() and limit number of indirect ICBs we follow to avoid infinite loops. Signed-off-by: Jan Kara <jack@suse.cz>
Diffstat (limited to 'fs/udf/file.c')
0 files changed, 0 insertions, 0 deletions