diff options
| author | Nicolas Pitre <nicolas.pitre@linaro.org> | 2018-10-30 13:26:15 -0400 |
|---|---|---|
| committer | Nicolas Pitre <nicolas.pitre@linaro.org> | 2018-10-30 14:24:19 -0400 |
| commit | 672ca9dd13f1aca0c17516f76fc5b0e8344b3e46 (patch) | |
| tree | d4cc70b2e65749144bb5992ca4c8a3232d444a64 /lib/timerqueue.c | |
| parent | 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d (diff) | |
Cramfs: fix abad comparison when wrap-arounds occur
It is possible for corrupted filesystem images to produce very large
block offsets that may wrap when a length is added, and wrongly pass
the buffer size test.
Reported-by: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
Signed-off-by: Nicolas Pitre <nico@linaro.org>
Cc: stable@vger.kernel.org
Diffstat (limited to 'lib/timerqueue.c')
0 files changed, 0 insertions, 0 deletions