• Phillip Lougher's avatar
    Squashfs: handle corruption of directory structure · ba7eb951
    Phillip Lougher authored
    commit 44cff8a9 upstream.
    
    Handle the rare case where a directory metadata block is uncompressed and
    corrupted, leading to a kernel oops in directory scanning (memcpy).
    Normally corruption is detected at the decompression stage and dealt with
    then, however, this will not happen if:
    
    - metadata isn't compressed (users can optionally request no metadata
      compression), or
    - the compressed metadata block was larger than the original, in which
      case the uncompressed version was used, or
    - the data was corrupt after decompression
    
    This patch fixes this by adding some sanity checks against known maximum
    values.
    Signed-off-by: default avatarPhillip Lougher <phillip@lougher.demon.co.uk>
    Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@suse.de>
    ba7eb951
dir.c 6.24 KB