linux/fs/hfs
Eric Sesterhenn d38b7aa7fc hfs: fix namelength memory corruption
Fix a stack corruption caused by a corrupted hfs filesystem.  If the
catalog name length is corrupted the memcpy overwrites the catalog btree
structure.  Since the field is limited to HFS_NAMELEN bytes in the
structure and the file format, we throw an error if it is too long.

Cc: Roman Zippel <zippel@linux-m68k.org>
Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-10-16 11:21:46 -07:00
..
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
attr.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
bfind.c address hfs on-disk corruption robustness review comments 2008-02-06 10:41:05 -08:00
bitmap.c hfs: convert bitmap_lock in a mutex 2008-07-25 10:53:33 -07:00
bnode.c [PATCH] fs: Conversions from kmalloc+memset to k(z|c)alloc 2006-09-27 08:26:10 -07:00
brec.c hfs_bnode_find() can fail, resulting in hfs_bnode_split() breakage 2008-03-17 09:46:55 -07:00
btree.c hfs: convert extents_lock in a mutex 2008-07-25 10:53:33 -07:00
btree.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
catalog.c hfs: fix namelength memory corruption 2008-10-16 11:21:46 -07:00
dir.c [PATCH] mark struct inode_operations const 2 2007-02-12 09:48:46 -08:00
extent.c hfs: convert extents_lock in a mutex 2008-07-25 10:53:33 -07:00
hfs.h address hfs on-disk corruption robustness review comments 2008-02-06 10:41:05 -08:00
hfs_fs.h hfs: convert extents_lock in a mutex 2008-07-25 10:53:33 -07:00
inode.c [PATCH] f_count may wrap around 2008-07-26 20:53:40 -04:00
mdb.c hfs/hfsplus: be*_add_cpu conversion 2008-04-30 08:29:51 -07:00
part_tbl.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
string.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
super.c vfs: Use const for kernel parser table 2008-10-13 10:10:37 -07:00
sysdep.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
trans.c [PATCH] hfs: NLS support 2005-09-07 16:57:50 -07:00