android_kernel_oneplus_msm8998/fs/squashfs
Phillip Lougher 68e7f41237 Squashfs: fix corruption checks in squashfs_readdir()
The dir_count and size fields when read from disk are sanity
checked for correctness.  However, the sanity checks only check the
values are not greater than expected.  As dir_count and size were
incorrectly defined as signed ints, this can lead to corrupted values
appearing as negative which are not trapped.

Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>
2013-09-06 04:57:53 +01:00
..
block.c Squashfs: Optimized uncompressed buffer loop 2013-09-05 00:13:37 +01:00
cache.c
decompressor.c
decompressor.h
dir.c Squashfs: fix corruption checks in squashfs_readdir() 2013-09-06 04:57:53 +01:00
export.c
file.c
fragment.c
id.c
inode.c
Kconfig
lzo_wrapper.c
Makefile
namei.c Squashfs: fix corruption checks in squashfs_lookup() 2013-09-06 04:57:53 +01:00
squashfs.h
squashfs_fs.h
squashfs_fs_i.h
squashfs_fs_sb.h
super.c
symlink.c
xattr.c
xattr.h
xattr_id.c
xz_wrapper.c
zlib_wrapper.c