| commit | 8d42c7b4447aac9fa128998075e961204e197510 | [log] [tgz] |
|---|---|---|
| author | Richard Weinberger <richard@nod.at> | Fri Aug 02 18:36:47 2024 +0200 |
| committer | Tom Rini <trini@konsulko.com> | Thu Aug 15 16:14:36 2024 -0600 |
| tree | 201c9c347730ed88a64c748a7fcc75af23ba6283 | |
| parent | e8db3d92455592cecbf8f2dbb75548001b3ad084 [diff] |
squashfs: Fix stack overflow while symlink resolving The squashfs driver blindly follows symlinks, and calls sqfs_size() recursively. So an attacker can create a crafted filesystem and with a deep enough nesting level a stack overflow can be achieved. Fix by limiting the nesting level to 8. Signed-off-by: Richard Weinberger <richard@nod.at> Reviewed-by: Miquel Raynal <miquel.raynal@bootlin.com>