Theodore Ts'o 7a3d844f83 ext4: add corruption check in ext4_xattr_set_entry() ... commit 5369a762c882c0b6e9599e4ebbb3a9ba9eee7e2d upstream. In theory this should have been caught earlier when the xattr list was verified, but in case it got missed, it's simple enough to add check to make sure we don't overrun the xattr buffer. This addresses CVE-2018-10879. https://bugzilla.kernel.org/show_bug.cgi?id=200001 Signed-off-by: Theodore Ts'o <tytso@mit.edu> Reviewed-by: Andreas Dilger <adilger@dilger.ca> [bwh: Backported to 3.16: - Add inode parameter to ext4_xattr_set_entry() and update callers - Adjust context] Signed-off-by: Ben Hutchings <ben@decadent.org.uk> [adjusted for 4.4 context] Signed-off-by: Daniel Rosenberg <drosen@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-10-20 09:52:34 +02:00
..
acl.c	ext4: Don't clear SGID when inheriting ACLs	2017-10-12 11:27:35 +02:00
acl.h
balloc.c	ext4: check for allocation block validity with block group locked	2018-08-06 16:24:40 +02:00
bitmap.c
block_validity.c	ext4: call out CRC and corruption errors with specific error codes	2015-10-17 16:16:04 -04:00
crypto.c	ext4 crypto: don't let data integrity writebacks fail with ENOMEM	2017-05-25 14:30:11 +02:00
crypto_fname.c	fscrypt: avoid collisions when presenting long encrypted filenames	2017-05-25 14:30:11 +02:00
crypto_key.c	fscrypt: lock mutex before checking for bounce page pool	2017-11-30 08:37:25 +00:00
crypto_policy.c	fscrypt: fix context consistency check when key(s) unavailable	2017-05-25 14:30:11 +02:00
dir.c	ext4: avoid divide by zero fault when deleting corrupted inline directories	2018-09-29 03:08:53 -07:00
ext4.h	ext4: add more inode number paranoia checks	2018-07-11 16:03:49 +02:00
ext4_crypto.h	fscrypt: remove broken support for detecting keyring key revocation	2017-03-31 09:49:54 +02:00
ext4_extents.h	ext4: verify the depth of extent tree in ext4_find_extent()	2018-07-11 16:03:48 +02:00
ext4_jbd2.c	ext4: fix potential use after free in __ext4_journal_stop	2015-10-17 22:57:06 -04:00
ext4_jbd2.h	ext4: do not perform data journaling when data is encrypted	2017-01-06 11:16:13 +01:00
extents.c	ext4: verify the depth of extent tree in ext4_find_extent()	2018-07-11 16:03:48 +02:00
extents_status.c	ext4: move procfs registration code to fs/ext4/sysfs.c	2015-09-23 12:46:17 -04:00
extents_status.h	ext4: move procfs registration code to fs/ext4/sysfs.c	2015-09-23 12:46:17 -04:00
file.c	ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff()	2018-04-13 19:50:11 +02:00
fsync.c
hash.c
ialloc.c	ext4: fix check to prevent initializing reserved inodes	2018-08-15 17:42:04 +02:00
indirect.c	ext4: clean up feature test macros with predicate functions	2015-10-17 16:18:43 -04:00
inline.c	ext4: avoid divide by zero fault when deleting corrupted inline directories	2018-09-29 03:08:53 -07:00
inode.c	ext4: fix inline data updates with checksums enabled	2018-08-06 16:24:40 +02:00
ioctl.c	ext4: require encryption feature for EXT4_IOC_SET_ENCRYPTION_POLICY	2017-05-08 07:46:02 +02:00
Kconfig	ext4: Update EXT4_USE_FOR_EXT2 description	2015-09-24 13:27:47 +02:00
Makefile	ext4: move sysfs code from super.c to fs/ext4/sysfs.c	2015-09-23 12:44:17 -04:00
mballoc.c	ext4: fix spectre gadget in ext4_mb_regular_allocator()	2018-08-24 13:27:00 +02:00
mballoc.h
migrate.c	ext4: clean up feature test macros with predicate functions	2015-10-17 16:18:43 -04:00
mmp.c	ext4: don't mark mmp buffer head dirty	2018-09-29 03:08:54 -07:00
move_extent.c	fs: add i_blocksize()	2017-06-14 13:16:24 +02:00
namei.c	ext4: reset error code in ext4_find_entry in fallback	2018-09-05 09:18:38 +02:00
page-io.c	ext4 crypto: fix some error handling	2017-05-25 14:30:11 +02:00
readpage.c	ext4 crypto: don't let data integrity writebacks fail with ENOMEM	2017-05-25 14:30:11 +02:00
resize.c	ext4: fix online resizing for bigalloc file systems with a 1k block size	2018-09-29 03:08:54 -07:00
super.c	ext4: recalucate superblock checksum after updating free blocks/inodes	2018-09-29 03:08:54 -07:00
symlink.c	don't put symlink bodies in pagecache into highmem	2018-02-16 20:09:38 +01:00
sysfs.c	ext4: sysfs: print ext4_super_block fields as little-endian	2018-09-05 09:18:38 +02:00
truncate.h	ext4: fix races between page faults and hole punching	2016-05-04 14:48:53 -07:00
xattr.c	ext4: add corruption check in ext4_xattr_set_entry()	2018-10-20 09:52:34 +02:00
xattr.h	ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()	2018-04-24 09:32:10 +02:00
xattr_security.c	xattr handlers: Pass handler to operations instead of flags	2015-11-13 20:34:32 -05:00
xattr_trusted.c	xattr handlers: Pass handler to operations instead of flags	2015-11-13 20:34:32 -05:00
xattr_user.c	xattr handlers: Pass handler to operations instead of flags	2015-11-13 20:34:32 -05:00