You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Phillip Lougher 8bb0269160 [PATCH] corrupted cramfs filesystems cause kernel oops ... Steve Grubb's fzfuzzer tool (http://people.redhat.com/sgrubb/files/ fsfuzzer-0.6.tar.gz) generates corrupt Cramfs filesystems which cause Cramfs to kernel oops in cramfs_uncompress_block(). The cause of the oops is an unchecked corrupted block length field read by cramfs_readpage(). This patch adds a sanity check to cramfs_readpage() which checks that the block length field is sensible. The (PAGE_CACHE_SIZE << 1) size check is intentional, even though the uncompressed data is not going to be larger than PAGE_CACHE_SIZE, gzip sometimes generates compressed data larger than the original source data. Mkcramfs checks that the compressed size is always less than or equal to PAGE_CACHE_SIZE << 1. Of course Cramfs could use the original uncompressed data in this case, but it doesn't. Signed-off-by: Phillip Lougher <phillip@lougher.org.uk> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>		18 years ago
..
9p	[PATCH] Function v9fs_get_idpool returns int, not u32 as called twice in fs/9p/vfs_inode.c	18 years ago
adfs	[PATCH] fs/*: trivial vsnprintf() conversion	18 years ago
affs	[PATCH] fs/*: trivial vsnprintf() conversion	18 years ago
afs	[PATCH] Add include/linux/freezer.h and move definitions from sched.h	18 years ago
autofs	[PATCH] autofs4: panic after mount fail	18 years ago
autofs4	[PATCH] autofs4: panic after mount fail	18 years ago
befs	[PATCH] slab: remove kmem_cache_t	18 years ago
bfs	[PATCH] slab: remove kmem_cache_t	18 years ago
cifs	[PATCH] Add include/linux/freezer.h and move definitions from sched.h	18 years ago
coda	[PATCH] slab: remove kmem_cache_t	18 years ago
configfs	[PATCH] slab: remove kmem_cache_t	18 years ago
cramfs	[PATCH] corrupted cramfs filesystems cause kernel oops	18 years ago
debugfs	[PATCH] debugfs: add header file	18 years ago
devpts	[PATCH] inode-diet: Eliminate i_blksize from the inode structure	19 years ago
dlm	[PATCH] slab: remove kmem_cache_t	18 years ago
ecryptfs	[PATCH] slab: remove kmem_cache_t	18 years ago
efs	[PATCH] slab: remove kmem_cache_t	18 years ago
exportfs	[PATCH] VFS: Make filldir_t and struct kstat deal in 64-bit inode numbers	19 years ago
ext2	[PATCH] Remove superfluous lock_super() in extN xattr code	18 years ago
ext3	[PATCH] ext3: uninline large functions	18 years ago
ext4	[PATCH] ext4: uninline large functions	18 years ago
fat	[PATCH] slab: remove kmem_cache_t	18 years ago
freevxfs	[PATCH] slab: remove kmem_cache_t	18 years ago
fuse	[PATCH] fuse: fix compile without CONFIG_BLOCK	18 years ago
gfs2	[PATCH] slab: remove kmem_cache_t	18 years ago
hfs	[PATCH] slab: remove kmem_cache_t	18 years ago
hfsplus	[PATCH] slab: remove kmem_cache_t	18 years ago
hostfs	[PATCH] Streamline generic_file_* interfaces and filemap cleanups	19 years ago
hpfs	[PATCH] hpfs: fix printk format warnings	18 years ago
hppfs	[PATCH] hppfs: readdir callback missed in prototype change	19 years ago
hugetlbfs	[PATCH] slab: remove kmem_cache_t	18 years ago
isofs	[PATCH] slab: remove kmem_cache_t	18 years ago
jbd	[PATCH] Add include/linux/freezer.h and move definitions from sched.h	18 years ago
jbd2	[PATCH] Add include/linux/freezer.h and move definitions from sched.h	18 years ago
jffs	[PATCH] Add include/linux/freezer.h and move definitions from sched.h	18 years ago
jffs2	[PATCH] Add include/linux/freezer.h and move definitions from sched.h	18 years ago
jfs	[PATCH] fs/*: trivial vsnprintf() conversion	18 years ago
lockd	[PATCH] Add include/linux/freezer.h and move definitions from sched.h	18 years ago
minix	[PATCH] slab: remove kmem_cache_t	18 years ago
msdos	[PATCH] fat: add fat_getattr()	18 years ago
ncpfs	[PATCH] slab: remove kmem_cache_t	18 years ago
nfs	[PATCH] slab: remove kmem_cache_t	18 years ago
nfs_common	[PATCH] nfs_common endianness annotations	19 years ago
nfsd	[PATCH] slab: remove kmem_cache_t	18 years ago
nls	fix file specification in comments	19 years ago
ntfs	[PATCH] slab: remove SLAB_NOFS	18 years ago
ocfs2	[PATCH] fs/*: trivial vsnprintf() conversion	18 years ago
openpromfs	[PATCH] slab: remove kmem_cache_t	18 years ago
partitions	[PATCH] Fix check_partition routines	18 years ago
proc	[PATCH] slab: remove kmem_cache_t	18 years ago
qnx4	[PATCH] slab: remove kmem_cache_t	18 years ago
ramfs	[PATCH] r/o bind mount prepwork: inc_nlink() helper	19 years ago
reiserfs	[PATCH] fix reiserfs bad path release panic	18 years ago
romfs	[PATCH] slab: remove kmem_cache_t	18 years ago
smbfs	[PATCH] slab: remove kmem_cache_t	18 years ago
sysfs	[PATCH] slab: remove kmem_cache_t	18 years ago
sysv	[PATCH] slab: remove kmem_cache_t	18 years ago
udf	[PATCH] fs/*: trivial vsnprintf() conversion	18 years ago
ufs	[PATCH] fs/*: trivial vsnprintf() conversion	18 years ago
vfat	[PATCH] fat: add fat_getattr()	18 years ago
xfs	[PATCH] Use freezeable workqueues in XFS	18 years ago
Kconfig	Fix typos in doc and comments	18 years ago
Kconfig.binfmt	…
Makefile	[PATCH] jbd2: enable building of jbd2 and have ext4 use it rather than jbd	19 years ago
aio.c	[PATCH] slab: remove kmem_cache_t	18 years ago
attr.c	…
bad_inode.c	[PATCH] Remove readv/writev methods and use aio_read/aio_write instead	19 years ago
binfmt_aout.c	[PATCH] Require mmap handler for a.out executables	19 years ago
binfmt_elf.c	[PATCH] binfmt: fix uaccess handling	18 years ago
binfmt_elf_fdpic.c	[PATCH] elf_fdpic_core_dump: don't take tasklist_lock	19 years ago
binfmt_em86.c	…
binfmt_flat.c	Remove obsolete #include <linux/config.h>	19 years ago
binfmt_misc.c	[PATCH] Fix unserialized task->files changing	19 years ago
binfmt_script.c	…
binfmt_som.c	[PARISC] Fix fs/binfmt_som.c	19 years ago
bio.c	[PATCH] slab: remove kmem_cache_t	18 years ago
block_dev.c	[PATCH] slab: remove kmem_cache_t	18 years ago
buffer.c	[PATCH] slab: remove kmem_cache_t	18 years ago
char_dev.c	[PATCH] BLOCK: Move extern declarations out of fs/*.c into header files [try #6]	19 years ago
compat.c	[PATCH] compat: fix uaccess handling	18 years ago
compat_ioctl.c	[PATCH] compat: fix uaccess handling	18 years ago
dcache.c	[PATCH] slab: remove kmem_cache_t	18 years ago
dcookies.c	[PATCH] slab: remove kmem_cache_t	18 years ago
direct-io.c	[PATCH] lockdep: annotate direct io	19 years ago
dnotify.c	[PATCH] slab: remove kmem_cache_t	18 years ago
dquot.c	[PATCH] slab: remove kmem_cache_t	18 years ago
drop_caches.c	…
eventpoll.c	[PATCH] slab: remove kmem_cache_t	18 years ago
exec.c	[PATCH] slab: remove SLAB_KERNEL	18 years ago
fcntl.c	[PATCH] slab: remove kmem_cache_t	18 years ago
fifo.c	[PATCH] pipe.c/fifo.c code cleanups	19 years ago
file.c	[PATCH] file: kill unnecessary timer in fdtable_defer	18 years ago
file_table.c	[PATCH] file: modify struct fown_struct to use a struct pid	19 years ago
filesystems.c	[PATCH] Ban register_filesystem(NULL);	19 years ago
fs-writeback.c	[PATCH] BLOCK: Remove dependence on existence of blockdev_superblock [try #6]	19 years ago
generic_acl.c	[PATCH] Generic infrastructure for acls	19 years ago
inode.c	[PATCH] slab: remove kmem_cache_t	18 years ago
inotify.c	[PATCH] severing fs.h, radix-tree.h -> sched.h	18 years ago
inotify_user.c	[PATCH] slab: remove kmem_cache_t	18 years ago
internal.h	[PATCH] CONFIG_BLOCK internal.h cleanups	19 years ago
ioctl.c	Remove obsolete #include <linux/config.h>	19 years ago
ioprio.c	[PATCH] block layer: ioprio_best function fix	19 years ago
libfs.c	[PATCH] r/o bind mount prepwork: inc_nlink() helper	19 years ago
locks.c	[PATCH] slab: remove kmem_cache_t	18 years ago
mbcache.c	[PATCH] slab: remove kmem_cache_t	18 years ago
mpage.c	[PATCH] BLOCK: Dissociate generic_writepages() from mpage stuff [try #6]	19 years ago
namei.c	[PATCH] VFS: extra check inside dentry_unhash()	18 years ago
namespace.c	[PATCH] slab: remove kmem_cache_t	18 years ago
nfsctl.c	Remove obsolete #include <linux/config.h>	19 years ago
no-block.c	[PATCH] BLOCK: Make it possible to disable the block layer [try #6]	19 years ago
open.c	[PATCH] r/o bind mounts: prepare for write access checks: collapse if()	19 years ago
pipe.c	[PATCH] Some cleanup in the pipe code	19 years ago
pnode.c	[PATCH] core: use list_move()	19 years ago
pnode.h	…
posix_acl.c	[PATCH] kmemdup: some users	19 years ago
quota.c	[PATCH] BLOCK: Make it possible to disable the block layer [try #6]	19 years ago
quota_v1.c	…
quota_v2.c	[PATCH] sem2mutex: quota	19 years ago
read_write.c	[PATCH] Add vector AIO support	19 years ago
read_write.h	[PATCH] Remove readv/writev methods and use aio_read/aio_write instead	19 years ago
readdir.c	[PATCH] VFS: Make filldir_t and struct kstat deal in 64-bit inode numbers	19 years ago
select.c	[PATCH] enforce RLIMIT_NOFILE in poll()	19 years ago
seq_file.c	[PATCH] sem2mutex: fs/seq_file.c	19 years ago
splice.c	[PATCH] splice: fix problem introduced with inode diet	19 years ago
stat.c	[PATCH] vfs_getattr(): remove dead code	18 years ago
super.c	[PATCH] severing fs.h, radix-tree.h -> sched.h	18 years ago
sync.c	[PATCH] severing fs.h, radix-tree.h -> sched.h	18 years ago
utimes.c	[PATCH] severing fs.h, radix-tree.h -> sched.h	18 years ago
xattr.c	[PATCH] Fix user.* xattr permission check for sticky dirs	19 years ago
xattr_acl.c	…