• Jan Kara's avatar
    udf: Avoid using stale lengthOfImpUse · c1ad35dd
    Jan Kara authored
    udf_write_fi() uses lengthOfImpUse of the entry it is writing to.
    However this field has not yet been initialized so it either contains
    completely bogus value or value from last directory entry at that place.
    In either case this is wrong and can lead to filesystem corruption or
    kernel crashes.
    Reported-by: default avatarbutt3rflyh4ck <butterflyhuangxx@gmail.com>
    CC: stable@vger.kernel.org
    Fixes: 979a6e28 ("udf: Get rid of 0-length arrays in struct fileIdentDesc")
    Signed-off-by: default avatarJan Kara <jack@suse.cz>
    c1ad35dd
namei.c 34.1 KB