1
linux/fs/hfs
Eric Sesterhenn d38b7aa7fc hfs: fix namelength memory corruption
Fix a stack corruption caused by a corrupted hfs filesystem.  If the
catalog name length is corrupted the memcpy overwrites the catalog btree
structure.  Since the field is limited to HFS_NAMELEN bytes in the
structure and the file format, we throw an error if it is too long.

Cc: Roman Zippel <zippel@linux-m68k.org>
Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-10-16 11:21:46 -07:00
..
attr.c
bfind.c address hfs on-disk corruption robustness review comments 2008-02-06 10:41:05 -08:00
bitmap.c hfs: convert bitmap_lock in a mutex 2008-07-25 10:53:33 -07:00
bnode.c
brec.c hfs_bnode_find() can fail, resulting in hfs_bnode_split() breakage 2008-03-17 09:46:55 -07:00
btree.c hfs: convert extents_lock in a mutex 2008-07-25 10:53:33 -07:00
btree.h
catalog.c hfs: fix namelength memory corruption 2008-10-16 11:21:46 -07:00
dir.c
extent.c hfs: convert extents_lock in a mutex 2008-07-25 10:53:33 -07:00
hfs_fs.h hfs: convert extents_lock in a mutex 2008-07-25 10:53:33 -07:00
hfs.h address hfs on-disk corruption robustness review comments 2008-02-06 10:41:05 -08:00
inode.c [PATCH] f_count may wrap around 2008-07-26 20:53:40 -04:00
Makefile
mdb.c hfs/hfsplus: be*_add_cpu conversion 2008-04-30 08:29:51 -07:00
part_tbl.c
string.c
super.c vfs: Use const for kernel parser table 2008-10-13 10:10:37 -07:00
sysdep.c
trans.c