summaryrefslogtreecommitdiff
path: root/include/sandboxblockdev.h
diff options
context:
space:
mode:
authorStefan Brüns <stefan.bruens@rwth-aachen.de>2016-10-09 20:15:27 +0200
committerTom Rini <trini@konsulko.com>2016-10-24 08:04:36 -0400
commitd1bdf22461e9f0638d4ddca0ccccfe61f8a653cf (patch)
tree3243614899dfb2f8b49cb1995aac1765fe5f025f /include/sandboxblockdev.h
parent15bf8c4f93020663b443b817a0192498bd9cd3f0 (diff)
ext4: Fix handling of direntlen in unlink_filename
The direntlen checks were quite bogus, i.e. the loop termination used "len + offset == blocksize" (exact match only), and checked for a direntlen less than 0. The latter can never happen as the len is unsigned, this has been reported by Coverity, CID 153384. Use the same code as in search_dir for directory traversal. This code has the correct checks for direntlen >= sizeof(struct dirent), and offset < blocksize. Signed-off-by: Stefan Brüns <stefan.bruens@rwth-aachen.de> Reported-by: Coverity (CID: 153383, 153384) Reviewed-by: Tom Rini <trini@konsulko.com> Reviewed-by: Lukasz Majewski <l.majewski@samsung.com>
Diffstat (limited to 'include/sandboxblockdev.h')
0 files changed, 0 insertions, 0 deletions