linux-ext4 - Re: [PATCH] e2fsprogs: add sanity check to extent manipulation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Thu, 28 Apr 2022 10:43:40 -0400
From:   "Theodore Ts'o" <tytso@....edu>
To:     linux-ext4@...r.kernel.org, Lukas Czerner <lczerner@...hat.com>
Cc:     "Theodore Ts'o" <tytso@....edu>, Nils Bars <nils_bars@...nline.de>
Subject: Re: [PATCH] e2fsprogs: add sanity check to extent manipulation

On Thu, 21 Apr 2022 19:31:48 +0200, Lukas Czerner wrote:
> It is possible to have a corrupted extent tree in such a way that a leaf
> node contains zero extents in it. Currently if that happens and we try
> to traverse the tree we can end up accessing wrong data, or possibly
> even uninitialized memory. Make sure we don't do that.
> 
> Additionally make sure that we have a sane number of bytes passed to
> memmove() in ext2fs_extent_delete().
> 
> [...]

Applied, thanks!

[1/1] libext2fs: add sanity check to extent manipulation
      commit: ab51d587bb9b229b1fade1afd02e1574c1ba5c76

Best regards,
-- 
Theodore Ts'o <tytso@....edu>