f2fs: check memory boundary by insane namelen
authorJaegeuk Kim <jaegeuk@kernel.org>
Wed, 14 Nov 2018 20:40:30 +0000 (12:40 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Aug 2020 09:01:48 +0000 (11:01 +0200)
commitf46a09b74aa359fc45e84e594d937891f1ba76da
tree6ed77d370eeda530a79f777927953a397ce8e333
parent16d15f971c03fa511d6c0b6a1861e9979fd83da9
f2fs: check memory boundary by insane namelen

[ Upstream commit 4e240d1bab1ead280ddf5eb05058dba6bbd57d10 ]

If namelen is corrupted to have very long value, fill_dentries can copy
wrong memory area.

Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/f2fs/dir.c