-
- Downloads
Squashfs: fix variable overflow triggered by sysbot
[ Upstream commit 12427de9 ] Sysbot reports a slab out of bounds write in squashfs_readahead(). This is ultimately caused by a file reporting an (infeasibly) large file size (1407374883553280 bytes) with the minimum block size of 4K. This causes variable overflow. Link: https://lkml.kernel.org/r/20231113160901.6444-1-phillip@squashfs.org.uk Signed-off-by:Phillip Lougher <phillip@squashfs.org.uk> Reported-by:
<syzbot+604424eb051c2f696163@syzkaller.appspotmail.com> Closes: https://lore.kernel.org/all/000000000000b1fda20609ede0d1@google.com/ Signed-off-by:
Andrew Morton <akpm@linux-foundation.org> Signed-off-by:
Sasha Levin <sashal@kernel.org>
Loading
Please register or sign in to comment