| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 19 Dec 2008 20:47:08 +0000 From: "Duane Griffin" <duaneg@...da.com> To: linux-kernel@...r.kernel.org Cc: linux-fsdevel@...r.kernel.org, Al Viro <viro@...iv.linux.org.uk>, Andrew Morton <akpm@...ux-foundation.org> Subject: [PATCH 0/10] make link target handling more robust These patches fix potential bugs associated with link target handling, primarily by NUL-terminating names read from disk. This is version 5 of these patches. This version fixes an off-by-one bug, pointed out by Andreas Dilger, where the maximum name length was calculated with sizeof without leaving space for the terminator. This set includes patches for all affected filesystems except for jfs, which has already been fixed by David Kleikamp, and ufs, where I am still discussing some issues with the maintainer. I'll post the ufs patch separately once it is ready. The eCryptFS fix should be considered for stable. diffstat: fs/9p/vfs_inode.c | 5 +++-- fs/befs/linuxvfs.c | 5 ++++- fs/ecryptfs/inode.c | 3 ++- fs/ext2/inode.c | 7 +++++-- fs/ext3/inode.c | 7 +++++-- fs/ext4/inode.c | 7 +++++-- fs/freevxfs/vxfs_inode.c | 4 +++- fs/namei.c | 7 +++++-- fs/sysv/inode.c | 6 +++++- include/linux/namei.h | 5 +++++ 10 files changed, 42 insertions(+), 14 deletions(-) Cheers, Duane, -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists