linux-ext4 - [PATCH] Validate e_value

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-id: <1234434120.3522.19.camel@jadoo>
Date:	Thu, 12 Feb 2009 15:52:00 +0530
From:	Girish <Girish.Shilamkar@....COM>
To:	tytso@....edu
Cc:	adilger@....COM, linux-ext4@...r.kernel.org
Subject: [PATCH] Validate e_value_offs for in-inode EAs

Hi Ted,

We came across a corruption in which e_value_offs for an in-inode EA was
corrupt and the overflow was causing a segfault. We should validate
e_value_offs for in-inode EAs as well.

I have also attached the regression test for this problem.

Signed-off-by: Girish Shilamkar <girish.shilamkar@....com>

-- 
Thanks,
Girish

View attachment "e2fsprogs-bad-ininode-ea.patch" of type "text/x-patch" (1701 bytes)

View attachment "e2fsprogs-tests-f_bad_ea_value.patch" of type "text/x-patch" (13061 bytes)