| commit | 0ceef3d3710960347fde6c57f12f3de6fe9cfaaf | [log] [tgz] |
|---|---|---|
| author | Stefan Brüns <stefan.bruens@rwth-aachen.de> | Tue Sep 06 04:36:50 2016 +0200 |
| committer | Tom Rini <trini@konsulko.com> | Fri Sep 23 09:02:40 2016 -0400 |
| tree | 72cac3cf807debecfaffe262c6d6994667a88edd | |
| parent | a9fa0ed183b7e156db0c711f2aad8d573fae3498 [diff] |
ext4: Avoid out-of-bounds access of block bitmap If the blocksize is 1024, count is initialized with 1. Incrementing count by 8 will never match (count == fs->blksz * 8), and ptr may be incremented beyond the buffer end if the bitmap is filled. Add the startblock offset after the loop. Remove the second loop, as only the first iteration will be done. Signed-off-by: Stefan Brüns <stefan.bruens@rwth-aachen.de> Reviewed-by: Lukasz Majewski <l.majewski@samsung.com>