diff options
| author | Jan Kara <jack@suse.cz> | 2014-12-15 14:22:46 +0100 |
|---|---|---|
| committer | Andreas Blaesius <skate4life@gmx.de> | 2017-05-17 19:23:48 +0200 |
| commit | 4893a8d1773cf27cb613ac6fcbc49b218538a59b (patch) | |
| tree | 321ee7381b899c8f9d28fa8d33f7db590cd6211b /net/ipv6 | |
| parent | 3900c2b6dcee9198e4e03abfecdedd1c30f68c0f (diff) | |
| download | kernel_samsung_tuna-4893a8d1773cf27cb613ac6fcbc49b218538a59b.tar.gz kernel_samsung_tuna-4893a8d1773cf27cb613ac6fcbc49b218538a59b.tar.bz2 kernel_samsung_tuna-4893a8d1773cf27cb613ac6fcbc49b218538a59b.zip | |
isofs: Fix infinite looping over CE entries
Rock Ridge extensions define so called Continuation Entries (CE) which
define where is further space with Rock Ridge data. Corrupted isofs
image can contain arbitrarily long chain of these, including a one
containing loop and thus causing kernel to end in an infinite loop when
traversing these entries.
Limit the traversal to 32 entries which should be more than enough space
to store all the Rock Ridge data.
Change-Id: I2c81b49e68144483186ea5fc35d052529ac001cb
Reported-by: P J P <ppandit@redhat.com>
CC: stable@vger.kernel.org
Signed-off-by: Jan Kara <jack@suse.cz>
Diffstat (limited to 'net/ipv6')
0 files changed, 0 insertions, 0 deletions