Theodore Ts'o ea057aed06 ext4: add validity checks for bitmap block numbers ... commit 7dac4a1726a9c64a517d595c40e95e2d0d135f6f upstream. An privileged attacker can cause a crash by mounting a crafted ext4 image which triggers a out-of-bounds read in the function ext4_valid_block_bitmap() in fs/ext4/balloc.c. This issue has been assigned CVE-2018-1093. BugLink: https://bugzilla.kernel.org/show_bug.cgi?id=199181 BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=1560782 Reported-by: Wen Xu <wen.xu@gatech.edu> Signed-off-by: Theodore Ts'o <tytso@mit.edu> Cc: stable@vger.kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-05-02 07:53:38 -07:00
..
acl.c	ext4: Don't clear SGID when inheriting ACLs	2017-10-12 11:27:35 +02:00
acl.h	ext2/3/4: use generic posix ACL infrastructure	2014-01-25 23:58:19 -05:00
balloc.c	ext4: add validity checks for bitmap block numbers	2018-05-02 07:53:38 -07:00
bitmap.c	ext4: remove unused header files	2015-04-02 23:47:42 -04:00
block_validity.c	ext4: call out CRC and corruption errors with specific error codes	2015-10-17 16:16:04 -04:00
crypto.c	ext4 crypto: don't let data integrity writebacks fail with ENOMEM	2017-05-25 14:30:11 +02:00
crypto_fname.c	fscrypt: avoid collisions when presenting long encrypted filenames	2017-05-25 14:30:11 +02:00
crypto_key.c	fscrypt: lock mutex before checking for bounce page pool	2017-11-30 08:37:25 +00:00
crypto_policy.c	fscrypt: fix context consistency check when key(s) unavailable	2017-05-25 14:30:11 +02:00
dir.c	ext4 crypto: revalidate dentry after adding or removing the key	2017-05-08 07:46:02 +02:00
ext4.h	ext4 crypto: don't let data integrity writebacks fail with ENOMEM	2017-05-25 14:30:11 +02:00
ext4_crypto.h	fscrypt: remove broken support for detecting keyring key revocation	2017-03-31 09:49:54 +02:00
ext4_extents.h	ext4: teach ext4_ext_find_extent() to realloc path if necessary	2014-09-01 14:40:09 -04:00
ext4_jbd2.c	ext4: fix potential use after free in __ext4_journal_stop	2015-10-17 22:57:06 -04:00
ext4_jbd2.h	ext4: do not perform data journaling when data is encrypted	2017-01-06 11:16:13 +01:00
extents.c	ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS	2018-05-02 07:53:38 -07:00
extents_status.c	ext4: move procfs registration code to fs/ext4/sysfs.c	2015-09-23 12:46:17 -04:00
extents_status.h	ext4: move procfs registration code to fs/ext4/sysfs.c	2015-09-23 12:46:17 -04:00
file.c	ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff()	2018-04-13 19:50:11 +02:00
fsync.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-04-26 17:22:07 -07:00
hash.c	ext4: remove unused header files	2015-04-02 23:47:42 -04:00
ialloc.c	ext4: add validity checks for bitmap block numbers	2018-05-02 07:53:38 -07:00
indirect.c	ext4: clean up feature test macros with predicate functions	2015-10-17 16:18:43 -04:00
inline.c	ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()	2018-04-24 09:32:10 +02:00
inode.c	ext4: bugfix for mmaped pages in mpage_release_unused_pages()	2018-04-24 09:32:11 +02:00
ioctl.c	ext4: require encryption feature for EXT4_IOC_SET_ENCRYPTION_POLICY	2017-05-08 07:46:02 +02:00
Kconfig	ext4: Update EXT4_USE_FOR_EXT2 description	2015-09-24 13:27:47 +02:00
Makefile	ext4: move sysfs code from super.c to fs/ext4/sysfs.c	2015-09-23 12:44:17 -04:00
mballoc.c	ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors	2018-04-13 19:50:09 +02:00
mballoc.h	ext4: remove unused ac_ex_scanned	2014-02-20 13:32:10 -05:00
migrate.c	ext4: clean up feature test macros with predicate functions	2015-10-17 16:18:43 -04:00
mmp.c	ext4: call out CRC and corruption errors with specific error codes	2015-10-17 16:16:04 -04:00
move_extent.c	fs: add i_blocksize()	2017-06-14 13:16:24 +02:00
namei.c	don't put symlink bodies in pagecache into highmem	2018-02-16 20:09:38 +01:00
page-io.c	ext4 crypto: fix some error handling	2017-05-25 14:30:11 +02:00
readpage.c	ext4 crypto: don't let data integrity writebacks fail with ENOMEM	2017-05-25 14:30:11 +02:00
resize.c	ext4: fix overflow caused by missing cast in ext4_resize_fs()	2017-08-11 09:08:48 -07:00
super.c	ext4: don't allow r/w mounts if metadata blocks overlap the superblock	2018-04-24 09:32:09 +02:00
symlink.c	don't put symlink bodies in pagecache into highmem	2018-02-16 20:09:38 +01:00
sysfs.c	ext4: check return value of kstrtoull correctly in reserved_clusters_store	2017-07-15 11:57:50 +02:00
truncate.h	ext4: fix races between page faults and hole punching	2016-05-04 14:48:53 -07:00
xattr.c	ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()	2018-04-24 09:32:10 +02:00
xattr.h	ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()	2018-04-24 09:32:10 +02:00
xattr_security.c	xattr handlers: Pass handler to operations instead of flags	2015-11-13 20:34:32 -05:00
xattr_trusted.c	xattr handlers: Pass handler to operations instead of flags	2015-11-13 20:34:32 -05:00
xattr_user.c	xattr handlers: Pass handler to operations instead of flags	2015-11-13 20:34:32 -05:00