Page MenuHomeFreeBSD

udf: Reject read requests with an invalid length
ClosedPublic

Authored by jhb on Jul 27 2023, 11:05 PM.
Tags
None
Referenced Files
F151139767: D41220.diff
Mon, Apr 6, 8:53 AM
F151133721: D41220.id125268.diff
Mon, Apr 6, 7:49 AM
Unknown Object (File)
Thu, Apr 2, 12:32 AM
Unknown Object (File)
Wed, Apr 1, 6:15 PM
Unknown Object (File)
Thu, Mar 26, 8:20 AM
Unknown Object (File)
Sun, Mar 22, 9:35 PM
Unknown Object (File)
Fri, Mar 20, 2:26 PM
Unknown Object (File)
Thu, Mar 19, 3:23 AM
Subscribers

Details

Summary
  • If the size is negative or if rounding it up to a multiple of the block size overflows, fail the read request with ERANGE.
  • While here, add a sanity check that the ICB length for the root directory is at least as long as a minimum-sized file entry.

PR: 257768
Reported by: Robert Morris <rtm@lcs.mit.edu>
Sponsored by: FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable