Re: [PATCH] reiserfs: fix buffer overflow with long warning messages

On Sat 07-07-18 13:36:21, Eric Biggers wrote: > From: Eric Biggers > > ReiserFS prepares log messages into a 1024-byte buffer with no bounds > checks. Long messages, such as the "unknown mount option" warning when > userspace passes a crafted mount options string, overflow this buffer. > This ca

[PATCH] reiserfs: fix buffer overflow with long warning messages

From: Eric Biggers ReiserFS prepares log messages into a 1024-byte buffer with no bounds checks. Long messages, such as the "unknown mount option" warning when userspace passes a crafted mount options string, overflow this buffer. This causes KASAN to report a global-out-of-bounds write. Fix it