You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tyler Hicks 0f751e641a eCryptfs: Extend array bounds for all filename chars ... From mhalcrow's original commit message: Characters with ASCII values greater than the size of filename_rev_map[] are valid filename characters. ecryptfs_decode_from_filename() will access kernel memory beyond that array, and ecryptfs_parse_tag_70_packet() will then decrypt those characters. The attacker, using the FNEK of the crafted file, can then re-encrypt the characters to reveal the kernel memory past the end of the filename_rev_map[] array. I expect low security impact since this array is statically allocated in the text area, and the amount of memory past the array that is accessible is limited by the largest possible ASCII filename character. This patch solves the issue reported by mhalcrow but with an implementation suggested by Linus to simply extend the length of filename_rev_map[] to 256. Characters greater than 0x7A are mapped to 0x00, which is how invalid characters less than 0x7A were previously being handled. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Reported-by: Michael Halcrow <mhalcrow@google.com> Cc: stable@kernel.org		13 years ago
..
Kconfig	eCryptfs: fix compile error	14 years ago
Makefile	eCryptfs: remove netlink transport	17 years ago
crypto.c	eCryptfs: Extend array bounds for all filename chars	13 years ago
debug.c	…
dentry.c	eCryptfs: Handle NULL nameidata pointers	14 years ago
ecryptfs_kernel.h	eCryptfs: Prevent file create race condition	13 years ago
file.c	eCryptfs: Flush file in vma close	13 years ago
inode.c	eCryptfs: Prevent file create race condition	13 years ago
keystore.c	eCryptfs: Fix payload_len unitialized variable warning	14 years ago
kthread.c	eCryptfs: Add reference counting to lower files	14 years ago
main.c	Ecryptfs: Add mount option to check uid of device being mounted = expect uid	14 years ago
messaging.c	ecryptfs: properly mark init functions	15 years ago
miscdev.c	llseek: automatically add .llseek fop	15 years ago
mmap.c	eCryptfs: Unlock page in write_begin error path	14 years ago
read_write.c	eCryptfs: Return error when lower file pointer is NULL	14 years ago
super.c	eCryptfs: Consolidate inode functions into inode.c	14 years ago