Cramfs: fix abad comparison when wrap-arounds occur
authorNicolas Pitre <nicolas.pitre@linaro.org>
Tue, 30 Oct 2018 17:26:15 +0000 (13:26 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 22 Nov 2018 06:32:45 +0000 (07:32 +0100)
commit2b4fc4a191ca24878592e6e9904b83b02873aaaa
tree9f381f5e0920a4149346d9ccc27bb568ef3bd927
parent2a30b6b06fcf3c075791aa46b837aeb8b9ba793e
Cramfs: fix abad comparison when wrap-arounds occur

commit 672ca9dd13f1aca0c17516f76fc5b0e8344b3e46 upstream.

It is possible for corrupted filesystem images to produce very large
block offsets that may wrap when a length is added, and wrongly pass
the buffer size test.

Reported-by: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
Signed-off-by: Nicolas Pitre <nico@linaro.org>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/cramfs/inode.c