diff options
author | Alden Tondettar | 2017-01-24 07:28:01 +0100 |
---|---|---|
committer | Karel Zak | 2017-01-25 11:43:06 +0100 |
commit | a157a23f6d34f26da437a32a9bd764805c2d7d85 (patch) | |
tree | f9a2723b4de22a2652b26d4ee069eab080bbc44f /m4/ax_check_vscript.m4 | |
parent | libblkid: Fix out of bounds reads on bad GPT header (diff) | |
download | kernel-qcow2-util-linux-a157a23f6d34f26da437a32a9bd764805c2d7d85.tar.gz kernel-qcow2-util-linux-a157a23f6d34f26da437a32a9bd764805c2d7d85.tar.xz kernel-qcow2-util-linux-a157a23f6d34f26da437a32a9bd764805c2d7d85.zip |
libblkid: Fix out of bounds reads in BEFS handling
The BEFS prober is quite trusting of whatever data is fed to it and
performs almost no bounds checks. There don't seem to be any
out-of-bounds writes as far as I can tell, but there are many ways a
corrupted image could cause libblkid to read OOB and segfault, or hang
in an infinite loop.
This fix makes a few sanity-checks of the superblock, add bounds checks
wherever they seem needed, and crudely checks for cycles in the B+ tree.
Signed-off-by: Alden Tondettar <alden.tondettar@gmail.com>
Diffstat (limited to 'm4/ax_check_vscript.m4')
0 files changed, 0 insertions, 0 deletions