Unverified Commit e44cc18d authored Feb 22, 2025 by openeuler-ci-bot Committed by Gitee Feb 22, 2025

!15184 binfmt_flat: Fix integer overflow bug on 32 bit systems

Merge Pull Request from: @ci-robot 
 
PR sync from: Tengda Wu <wutengda2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/QGGNKH7IB6PYMBCFLWMUQGLW7P5G2NQM/ 
 
https://gitee.com/openeuler/kernel/issues/IBNTYM 
 
Link:https://gitee.com/openeuler/kernel/pulls/15184

 

Reviewed-by: Ye Weihua <yeweihua4@huawei.com>
Signed-off-by: Zhang Peng <zhangpeng362@huawei.com>

parents 7925d525 04d0fed1

fs/binfmt_flat.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -478,7 +478,7 @@ static int load_flat_file(struct linux_binprm *bprm,
		* 28 bits (256 MB) is way more than reasonable in this case.
		* If some top bits are set we have probable binary corruption.
		*/
		if ((text_len \| data_len \| bss_len \| stack_len \| full_data) >> 28) {
		if ((text_len \| data_len \| bss_len \| stack_len \| relocs \| full_data) >> 28) {
		pr_err("bad header\n");
		ret = -ENOEXEC;
		goto err;