Kees Cook 02e2a5bfeb mac: validate mac_partition is within sector ...

If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single
512 byte sector would be read (secsize / 512). However the partition
structure would be located past the end of the buffer (secsize % 512).

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Jens Axboe <axboe@fb.com>

2015-11-20 08:49:28 -07:00

..

acorn.c

…

acorn.h

…

aix.c

partitions: aix.c: off by one bug

2014-08-05 13:13:24 -06:00

aix.h

…

amiga.c

block/partitions/amiga.c: replace nolevel printk by pr_err

2014-07-01 10:40:02 -06:00

amiga.h

…

atari.c

…

atari.h

block: Use macros from compiler.h instead of __attribute__((...))

2014-02-18 12:20:01 -08:00

check.c

block: Remove annoying "unknown partition table" message

2015-01-22 08:03:52 -07:00

check.h

…

cmdline.c

…

cmdline.h

…

efi.c

efi: Rename efi_guid_unparse to efi_guid_to_str

2015-01-07 19:07:44 -08:00

efi.h

block: Use macros from compiler.h instead of __attribute__((...))

2014-02-18 12:20:01 -08:00

ibm.c

…

ibm.h

…

karma.c

block: Use macros from compiler.h instead of __attribute__((...))

2014-02-18 12:20:01 -08:00

karma.h

…

Kconfig

…

ldm.c

…

ldm.h

…

mac.c

mac: validate mac_partition is within sector

2015-11-20 08:49:28 -07:00

mac.h

…

Makefile

…

msdos.c

block/partitions/msdos.c: code clean-up

2014-07-01 10:40:03 -06:00

msdos.h

…

osf.c

…

osf.h

…

sgi.c

…

sgi.h

…

sun.c

…

sun.h

…

sysv68.c

…

sysv68.h

…

ultrix.c

…

ultrix.h

…