Re: [U-Boot] [PATCH 5/5] CVE-2019-13106: ext4: fix out-of-bounds memset

2019-07-18 Thread Tom Rini
On Mon, Jul 08, 2019 at 04:37:07PM -0700, Paul Emge wrote: > In ext4fs_read_file in ext4fs.c, a memset can overwrite the bounds of > the destination memory region. This patch adds a check to disallow > this. > > Signed-off-by: Paul Emge Applied to u-boot/master, thanks! -- Tom

[U-Boot] [PATCH 5/5] CVE-2019-13106: ext4: fix out-of-bounds memset

2019-07-08 Thread Paul Emge
In ext4fs_read_file in ext4fs.c, a memset can overwrite the bounds of the destination memory region. This patch adds a check to disallow this. Signed-off-by: Paul Emge --- fs/ext4/ext4fs.c | 7 +-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/fs/ext4/ext4fs.c