HomeFreeBSD

MFC r275645;

Description

MFC r275645;

ext2fs: Fix old out-of-bounds access.

Overrunning buffer pointed to by (caddr_t)&oip->i_db[0] of 48 bytes by
passing it to a function which accesses it at byte offset 59 using
argument 60UL.

The issue was inherited from an older FFS implementation and
fixed there with by merging UFS2 in r98542. We follow the
FFS fix.

CID: 1007665
Discussed with: bde

Details

Provenance
pfgAuthored on
Parents
rS275833: The iret instruction may generate #np and #ss fault, besides #gp.
Branches
Unknown
Tags
Unknown

Event Timeline