diff options
| author | Hui Peng <benquike@gmail.com> | 2026-10-21 13:46:18 +0200 |
|---|---|---|
| committer | Jan Kara <jack@suse.cz> | 2026-10-26 14:18:57 +0100 |
| commit | 49f771d14578733a350c45e34e1bc6ad14f56952 (patch) | |
| tree | d66202ae5cc037fcc418502e5b7cf5a861f38b98 /tools/perf/scripts/python/parallel-perf.py | |
| parent | 6b4b543fa18757297ac756a6fe6e64f506b7844a (diff) | |
udf: validate vat20->lengthHeader and VAT inode size in udf_load_vat()
In udf_load_vat() (fs/udf/super.c), validate that vat20->lengthHeader is
at least sizeof(struct virtualAllocationTable20) and does not exceed the
mapped buffer or VAT inode size so computing the VAT table pointer and
entry count cannot underflow or read out of bounds.
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Link: https://patch.msgid.link/20260919222600.3793513-1-benquike@gmail.com
Signed-off-by: Hui Peng <benquike@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Diffstat (limited to 'tools/perf/scripts/python/parallel-perf.py')
0 files changed, 0 insertions, 0 deletions