Kernel/linux-next
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git synced 2025-01-16 13:34:30 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fs/ntfs3: Fix oob in ntfs_listxattr

Browse Source 
The length of name cannot exceed the space occupied by ea.

Reported-and-tested-by: syzbot+65e940cfb8f99a97aca7@syzkaller.appspotmail.com
Signed-off-by: Edward Adam Davis <eadavis@qq.com>
Signed-off-by: Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
This commit is contained in:
Edward Adam Davis 2023-12-30 17:00:03 +08:00 committed by Konstantin Komarov
parent b2dd7b953c
commit 731ab1f982
No known key found for this signature in database
GPG Key ID: A9B0331F832407B6
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
fs/ntfs3/xattr.c
View File

@ -219,6 +219,9 @@ static ssize_t ntfs_list_ea(struct ntfs_inode *ni, char *buffer,
if (!ea->name_len) if (!ea->name_len)
break; break;
if (ea->name_len > ea_size)
break;
if (buffer) { if (buffer) {
/* Check if we can use field ea->name */ /* Check if we can use field ea->name */
if (off + ea_size > size) if (off + ea_size > size)