diff options
| author | Jan Kara <jack@suse.cz> | 2014-12-19 00:37:50 +0300 |
|---|---|---|
| committer | Jan Kara <jack@suse.cz> | 2014-12-19 16:12:08 +0300 |
| commit | 0e5cc9a40ada6046e6bc3bdfcd0c0d7e4b706b14 (patch) | |
| tree | 6a9a8bef5942cb6b18ae977fd1be24c59cebe71c /fs/udf/dir.c | |
| parent | a1d47b262952a45aae62bd49cfaf33dd76c11a2c (diff) | |
| download | linux-0e5cc9a40ada6046e6bc3bdfcd0c0d7e4b706b14.tar.xz | |
udf: Check path length when reading symlink
Symlink reading code does not check whether the resulting path fits into
the page provided by the generic code. This isn't as easy as just
checking the symlink size because of various encoding conversions we
perform on path. So we have to check whether there is still enough space
in the buffer on the fly.
CC: stable@vger.kernel.org
Reported-by: Carl Henrik Lunde <chlunde@ping.uio.no>
Signed-off-by: Jan Kara <jack@suse.cz>
Diffstat (limited to 'fs/udf/dir.c')
| -rw-r--r-- | fs/udf/dir.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/fs/udf/dir.c b/fs/udf/dir.c index a012c51caffd..a7690b46ce0a 100644 --- a/fs/udf/dir.c +++ b/fs/udf/dir.c @@ -167,7 +167,8 @@ static int udf_readdir(struct file *file, struct dir_context *ctx) continue; } - flen = udf_get_filename(dir->i_sb, nameptr, fname, lfi); + flen = udf_get_filename(dir->i_sb, nameptr, lfi, fname, + UDF_NAME_LEN); if (!flen) continue; |