diff options
| author | Phillip Lougher <phillip@squashfs.org.uk> | 2013-09-03 04:52:52 +0100 |
|---|---|---|
| committer | Mister Oyster <oysterized@gmail.com> | 2017-04-11 11:00:16 +0200 |
| commit | a43606512c6228834f4ce9682d615cd46a20fadf (patch) | |
| tree | dba179d1a47518767ae16ea398433f5f6e6eabdf /scripts | |
| parent | 72a50f611b418a77b34d44354ab32378dffa2889 (diff) | |
Squashfs: add corruption check in get_dir_index_using_offset()
We read the size (of the name) field from disk. This value should
be sanity checked for correctness to avoid blindly reading
huge amounts of unnecessary data from disk on corruption.
Note, here we're not actually reading the name into a buffer, but
skipping it, and so corruption doesn't cause buffer overflow, merely
lots of unnecessary amounts of data to be read.
Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>
Change-Id: Ie5c833653d72bb0a89623bfc83e724a5015ea90e
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions