Squashfs: handle corruption of directory structure
commit6f5ff91733db188b0cbcc59482dbc7e20b17d56d
authorPhillip Lougher <phillip@lougher.demon.co.uk>
Tue, 15 Mar 2011 22:09:55 +0000 (15 22:09 +0000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 14 Apr 2011 23:53:11 +0000 (14 16:53 -0700)
tree7f65f8d6782c98bffe29e2ba7b8539ec91216f08
parent98eec152c36e9544a81fa709d0eb2cf028cf4cdb
Squashfs: handle corruption of directory structure

commit 44cff8a9ee8a974f9e931df910688e7fc1f0b0f9 upstream.

Handle the rare case where a directory metadata block is uncompressed and
corrupted, leading to a kernel oops in directory scanning (memcpy).
Normally corruption is detected at the decompression stage and dealt with
then, however, this will not happen if:

- metadata isn't compressed (users can optionally request no metadata
  compression), or
- the compressed metadata block was larger than the original, in which
  case the uncompressed version was used, or
- the data was corrupt after decompression

This patch fixes this by adding some sanity checks against known maximum
values.

Signed-off-by: Phillip Lougher <phillip@lougher.demon.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/squashfs/dir.c
fs/squashfs/namei.c