Unverified Commit 931ac8ed authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!8521 isofs: Fix out of bound access for corrupted isofs image 

Merge Pull Request from: @ci-robot 
 
PR sync from: Guo Mengqi <guomengqi3@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/26HGXRHFIH3Z5NNYYK5WLQTSSXKIO7JD/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9RD2M 
 
Link:https://gitee.com/openeuler/kernel/pulls/8521

 

Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents 4769fc98 a94a9249

fs/isofs/inode.c

+2 −0
Original line number Diff line number Diff line
@@ -1327,6 +1327,8 @@ static int isofs_read_inode(struct inode *inode, int relocated) 


	de = (struct iso_directory_record *) (bh->b_data + offset);

	de_len = *(unsigned char *) de;

	if (de_len < sizeof(struct iso_directory_record))

		goto fail;



	if (offset + de_len > bufsize) {

		int frag1 = bufsize - offset;