| commit | 52e9ce1c0f2060661e147ffaf701a17f2fc0a153 | |
| author | Phillip Lougher <phillip@squashfs.org.uk> | |
| Tue, 3 Sep 2013 03:21:52 +0000 (3 04:21 +0100) | ||
| committer | Phillip Lougher <phillip@squashfs.org.uk> | |
| Fri, 6 Sep 2013 03:57:53 +0000 (6 04:57 +0100) | ||
| tree | f2aab5b8acc99d967bc507da019e95f6ded80292 | treesnapshot (tar.gz zip) |
| parent | 9dbc41d5d371cb10099c8182552f3915920e69b6 | commitdiff |
Squashfs: fix corruption checks in squashfs_lookup()
The dir_count and size fields when read from disk are sanity
checked for correctness. However, the sanity checks only check the
values are not greater than expected. As dir_count and size were
incorrectly defined as signed ints, this can lead to corrupted values
appearing as negative which are not trapped.
Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>
The dir_count and size fields when read from disk are sanity
checked for correctness. However, the sanity checks only check the
values are not greater than expected. As dir_count and size were
incorrectly defined as signed ints, this can lead to corrupted values
appearing as negative which are not trapped.
Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>
| fs/squashfs/namei.c | diffblobblamehistory |