projects / GitHub / exynos8895 / android_kernel_samsung_universal8895.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8aeea03) | patch
mac: validate mac_partition is within sector
authorKees Cook <keescook@chromium.org>
Fri, 20 Nov 2015 01:18:54 +0000 (17:18 -0800)
committerJens Axboe <axboe@fb.com>
Fri, 20 Nov 2015 15:49:28 +0000 (08:49 -0700)
commit02e2a5bfebe99edcf9d694575a75032d53fe1b73
tree815d3e15f91df416bdabd567d11f3983fa48f383tree | snapshot (tar.gz zip)
parent8aeea03195ee6e33fcb00039c414eabfc37a4eb8commit | diff
mac: validate mac_partition is within sector

If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single
512 byte sector would be read (secsize / 512). However the partition
structure would be located past the end of the buffer (secsize % 512).

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Jens Axboe <axboe@fb.com>
block/partitions/mac.c diff | blob | blame | history