From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Message-Id: <20120205220951.845011258@pcw.home.local> Date: Sun, 05 Feb 2012 23:10:45 +0100 From: Willy Tarreau To: linux-kernel@vger.kernel.org, stable@vger.kernel.org Cc: Dan Carpenter , Linus Torvalds , Greg KH Subject: [PATCH 56/91] hfs: add sanity check for file name length In-Reply-To: <0635750f5f06ed2ca212b91fcb5c4483@local> Sender: linux-kernel-owner@vger.kernel.org List-ID: 2.6.27-longterm review patch. If anyone has any objections, please let us know. ------------------ commit bc5b8a9003132ae44559edd63a1623b7b99dfb68 upstream. On a corrupted file system the ->len field could be wrong leading to a buffer overflow. Reported-and-acked-by: Clement LECIGNE Signed-off-by: Dan Carpenter Signed-off-by: Linus Torvalds Signed-off-by: Greg Kroah-Hartman --- fs/hfs/trans.c | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) Index: longterm-2.6.27/fs/hfs/trans.c =================================================================== --- longterm-2.6.27.orig/fs/hfs/trans.c 2012-02-05 22:34:33.296915074 +0100 +++ longterm-2.6.27/fs/hfs/trans.c 2012-02-05 22:34:42.844914477 +0100 @@ -40,6 +40,8 @@ src = in->name; srclen = in->len; + if (srclen > HFS_NAMELEN) + srclen = HFS_NAMELEN; dst = out; dstlen = HFS_MAX_NAMELEN; if (nls_io) {