diff options
| author |   Theodore Ts'o <tytso@mit.edu> | 2018-06-14 12:55:10 -0400 |
|---|---|---|
| committer | Theodore Ts'o <tytso@mit.edu> | 2018-06-14 12:55:10 -0400 |
| commit | bc890a60247171294acc0bd67d211fa4b88d40ba (patch) | |
| tree | cb1aeb05ac0a8eb30f12d49c68da6f1a65187bc2 /tools/perf/util/scripting-engines/trace-event-python.c | |
| parent | ext4: only look at the bg_flags field if it is valid (diff) | |
| download | wireguard-linux-bc890a60247171294acc0bd67d211fa4b88d40ba.tar.xz wireguard-linux-bc890a60247171294acc0bd67d211fa4b88d40ba.zip | |
ext4: verify the depth of extent tree in ext4_find_extent()
If there is a corupted file system where the claimed depth of the
extent tree is -1, this can cause a massive buffer overrun leading to
sadness.
This addresses CVE-2018-10877.
https://bugzilla.kernel.org/show_bug.cgi?id=199417
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Cc: stable@kernel.org
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-python.c')
0 files changed, 0 insertions, 0 deletions