ext4: never move the system.data xattr out of the inode body
authorTheodore Ts'o <tytso@mit.edu>
Sat, 16 Jun 2018 19:40:48 +0000 (15:40 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 11 Jul 2018 14:29:18 +0000 (16:29 +0200)
commit8a9ef17c0dc93def47e17b227ada95c682592a1d
treebecc147f63b97fcc1726bf81a9ef2ca6805c9b4e
parentdeb465ec750b80776cc4ac5b92b72c0a71fd4f0b
ext4: never move the system.data xattr out of the inode body

commit 8cdb5240ec5928b20490a2bb34cb87e9a5f40226 upstream.

When expanding the extra isize space, we must never move the
system.data xattr out of the inode body.  For performance reasons, it
doesn't make any sense, and the inline data implementation assumes
that system.data xattr is never in the external xattr block.

This addresses CVE-2018-10880

https://bugzilla.kernel.org/show_bug.cgi?id=200005

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ext4/xattr.c