| commit | a4a48ef7734f57ca46e6ecd8af5ca4296b878f97 | [log] [tgz] |
|---|---|---|
| author | Paul Emge <paulemge@forallsecure.com> | Mon Jul 08 16:37:05 2019 -0700 |
| committer | Tom Rini <trini@konsulko.com> | Thu Jul 18 11:31:29 2019 -0400 |
| tree | 1cfc04f11647a0a0a5012195205acc33066b8830 | |
| parent | 955dbbc60825f0e60b44231d6e95003562ef1c3a [diff] |
CVE-2019-13104: ext4: check for underflow in ext4fs_read_file in ext4fs_read_file, it is possible for a broken/malicious file system to cause a memcpy of a negative number of bytes, which overflows all memory. This patch fixes the issue by checking for a negative length. Signed-off-by: Paul Emge <paulemge@forallsecure.com>