| commit | f960cae5357d8e52b8af91e8b1621cae565dffb3 | [log] [tgz] |
|---|---|---|
| author | Phillip Lougher <phillip@squashfs.org.uk> | Tue Sep 03 04:52:52 2013 +0100 |
| committer | Phillip Lougher <phillip@squashfs.org.uk> | Fri Sep 06 04:57:53 2013 +0100 |
| tree | 0b1abaf2638d2bb842206e27009c5383687974f0 | |
| parent | 68e7f412370ecfeb1bd667d0d174fad34517516e [diff] |
Squashfs: add corruption check in get_dir_index_using_offset() We read the size (of the name) field from disk. This value should be sanity checked for correctness to avoid blindly reading huge amounts of unnecessary data from disk on corruption. Note, here we're not actually reading the name into a buffer, but skipping it, and so corruption doesn't cause buffer overflow, merely lots of unnecessary amounts of data to be read. Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>