Cramfs: fix abad comparison when wrap-arounds occur
authorNicolas Pitre <nicolas.pitre@linaro.org>
Tue, 30 Oct 2018 17:26:15 +0000 (13:26 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 13 Nov 2018 19:15:12 +0000 (11:15 -0800)
commitfdd780d0a26070e59fe2c3690a776aad25227756
treeee7c0e92686bcbc9c1aa7a701c0b3b54c81a7f7b
parent7f46d951fd3389089500623a9f026e4d25be823a
Cramfs: fix abad comparison when wrap-arounds occur

commit 672ca9dd13f1aca0c17516f76fc5b0e8344b3e46 upstream.

It is possible for corrupted filesystem images to produce very large
block offsets that may wrap when a length is added, and wrongly pass
the buffer size test.

Reported-by: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
Signed-off-by: Nicolas Pitre <nico@linaro.org>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/cramfs/inode.c