| commit | 878269dbe74229005dd7f27aca66c554e31dad8e | [log] [tgz] |
|---|---|---|
| author | Paul Emge <paulemge@forallsecure.com> | Mon Jul 08 16:37:05 2019 -0700 |
| committer | Tom Rini <trini@konsulko.com> | Thu Jul 18 11:31:29 2019 -0400 |
| tree | 1cfc04f11647a0a0a5012195205acc33066b8830 | |
| parent | 6e5a79de658cb1c8012c86e0837379aa6eabd024 [diff] |
CVE-2019-13104: ext4: check for underflow in ext4fs_read_file in ext4fs_read_file, it is possible for a broken/malicious file system to cause a memcpy of a negative number of bytes, which overflows all memory. This patch fixes the issue by checking for a negative length. Signed-off-by: Paul Emge <paulemge@forallsecure.com>