Whamcloud - gitweb
libsupport: add checks to prevent buffer overrun bugs in quota code
authorTheodore Ts'o <tytso@mit.edu>
Sun, 1 Sep 2019 04:59:16 +0000 (00:59 -0400)
committerTheodore Y. Ts'o <tytso@mit.edu>
Wed, 25 Sep 2019 17:37:44 +0000 (13:37 -0400)
commitdbb6b49eda2ee5e2aaecd755d77c7b7f61532e0c
tree3604a80c4ca6680be06e7c32c202cbe0e77d3466
parentb8c22850f410d094ee23328e536738d1b42e8fe9
libsupport: add checks to prevent buffer overrun bugs in quota code

A maliciously corrupted file systems can trigger buffer overruns in
the quota code used by e2fsck.  To fix this, add sanity checks to the
quota header fields as well as to block number references in the quota
tree.

Addresses: CVE-2019-5094
Addresses: TALOS-2019-0887
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
(cherry picked from commit 8dbe7b475ec5e91ed767239f0e85880f416fc384)

Gbp-Pq: Name libsupport-add-checks-to-prevent-buffer-.patch
lib/support/mkquota.c
lib/support/quotaio_tree.c
lib/support/quotaio_v2.c