| commit | 02e2a5bfebe99edcf9d694575a75032d53fe1b73 | [log] [tgz] |
|---|---|---|
| author | Kees Cook <keescook@chromium.org> | Thu Nov 19 17:18:54 2015 -0800 |
| committer | Jens Axboe <axboe@fb.com> | Fri Nov 20 08:49:28 2015 -0700 |
| tree | 815d3e15f91df416bdabd567d11f3983fa48f383 | |
| parent | 8aeea03195ee6e33fcb00039c414eabfc37a4eb8 [diff] |
mac: validate mac_partition is within sector If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single 512 byte sector would be read (secsize / 512). However the partition structure would be located past the end of the buffer (secsize % 512). Signed-off-by: Kees Cook <keescook@chromium.org> Cc: stable@vger.kernel.org Signed-off-by: Jens Axboe <axboe@fb.com>