| commit | bc890a60247171294acc0bd67d211fa4b88d40ba | [log] [tgz] |
|---|---|---|
| author | Theodore Ts'o <tytso@mit.edu> | Thu Jun 14 12:55:10 2018 -0400 |
| committer | Theodore Ts'o <tytso@mit.edu> | Thu Jun 14 12:55:10 2018 -0400 |
| tree | cb1aeb05ac0a8eb30f12d49c68da6f1a65187bc2 | |
| parent | 8844618d8aa7a9973e7b527d038a2a589665002c [diff] |
ext4: verify the depth of extent tree in ext4_find_extent() If there is a corupted file system where the claimed depth of the extent tree is -1, this can cause a massive buffer overrun leading to sadness. This addresses CVE-2018-10877. https://bugzilla.kernel.org/show_bug.cgi?id=199417 Signed-off-by: Theodore Ts'o <tytso@mit.edu> Cc: stable@kernel.org