<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/fs/squashfs, branch v3.12.26</title>
<subtitle>Linux kernel source tree</subtitle>
<id>https://git.amat.us/linux/atom/fs/squashfs?h=v3.12.26</id>
<link rel='self' href='https://git.amat.us/linux/atom/fs/squashfs?h=v3.12.26'/>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/'/>
<updated>2013-09-06T03:57:54Z</updated>
<entry>
<title>Squashfs: add corruption check for type in squashfs_readdir()</title>
<updated>2013-09-06T03:57:54Z</updated>
<author>
<name>Phillip Lougher</name>
<email>phillip@squashfs.org.uk</email>
</author>
<published>2013-09-04T01:58:12Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=9e012423869e1efbae3762b87ceab509027231c9'/>
<id>urn:sha1:9e012423869e1efbae3762b87ceab509027231c9</id>
<content type='text'>
We read the type field from disk.  This value should be sanity
checked for correctness to avoid an out of bounds access when
reading the squashfs_filetype_table array.

Signed-off-by: Phillip Lougher &lt;phillip@squashfs.org.uk&gt;
</content>
</entry>
<entry>
<title>Squashfs: add corruption check in get_dir_index_using_offset()</title>
<updated>2013-09-06T03:57:53Z</updated>
<author>
<name>Phillip Lougher</name>
<email>phillip@squashfs.org.uk</email>
</author>
<published>2013-09-03T03:52:52Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=f960cae5357d8e52b8af91e8b1621cae565dffb3'/>
<id>urn:sha1:f960cae5357d8e52b8af91e8b1621cae565dffb3</id>
<content type='text'>
We read the size (of the name) field from disk.  This value should
be sanity checked for correctness to avoid blindly reading
huge amounts of unnecessary data from disk on corruption.

Note, here we're not actually reading the name into a buffer, but
skipping it, and so corruption doesn't cause buffer overflow, merely
lots of unnecessary amounts of data to be read.

Signed-off-by: Phillip Lougher &lt;phillip@squashfs.org.uk&gt;
</content>
</entry>
<entry>
<title>Squashfs: fix corruption checks in squashfs_readdir()</title>
<updated>2013-09-06T03:57:53Z</updated>
<author>
<name>Phillip Lougher</name>
<email>phillip@squashfs.org.uk</email>
</author>
<published>2013-09-03T03:38:43Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=68e7f412370ecfeb1bd667d0d174fad34517516e'/>
<id>urn:sha1:68e7f412370ecfeb1bd667d0d174fad34517516e</id>
<content type='text'>
The dir_count and size fields when read from disk are sanity
checked for correctness.  However, the sanity checks only check the
values are not greater than expected.  As dir_count and size were
incorrectly defined as signed ints, this can lead to corrupted values
appearing as negative which are not trapped.

Signed-off-by: Phillip Lougher &lt;phillip@squashfs.org.uk&gt;
</content>
</entry>
<entry>
<title>Squashfs: fix corruption checks in squashfs_lookup()</title>
<updated>2013-09-06T03:57:53Z</updated>
<author>
<name>Phillip Lougher</name>
<email>phillip@squashfs.org.uk</email>
</author>
<published>2013-09-03T03:21:52Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=52e9ce1c0f2060661e147ffaf701a17f2fc0a153'/>
<id>urn:sha1:52e9ce1c0f2060661e147ffaf701a17f2fc0a153</id>
<content type='text'>
The dir_count and size fields when read from disk are sanity
checked for correctness.  However, the sanity checks only check the
values are not greater than expected.  As dir_count and size were
incorrectly defined as signed ints, this can lead to corrupted values
appearing as negative which are not trapped.

Signed-off-by: Phillip Lougher &lt;phillip@squashfs.org.uk&gt;
</content>
</entry>
<entry>
<title>Squashfs: fix corruption check in get_dir_index_using_name()</title>
<updated>2013-09-06T03:57:52Z</updated>
<author>
<name>Phillip Lougher</name>
<email>phillip@squashfs.org.uk</email>
</author>
<published>2013-09-03T03:02:53Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=9dbc41d5d371cb10099c8182552f3915920e69b6'/>
<id>urn:sha1:9dbc41d5d371cb10099c8182552f3915920e69b6</id>
<content type='text'>
Patch "Squashfs: sanity check information from disk" from
Dan Carpenter adds a missing check for corruption in the
"size" field while reading the directory index from disk.

It, however, sets err to -EINVAL, this value is not used later, and
so setting it is completely redundant.  So remove it.

Errors in reading the index are deliberately non-fatal.  If we
get an error in reading the index we just return the part of the
index we have managed to read - the index isn't essential,
just quicker.

Signed-off-by: Phillip Lougher &lt;phillip@squashfs.org.uk&gt;
</content>
</entry>
<entry>
<title>Squashfs: Optimized uncompressed buffer loop</title>
<updated>2013-09-04T23:13:37Z</updated>
<author>
<name>Manish Sharma</name>
<email>manishrma@gmail.com</email>
</author>
<published>2013-09-04T17:01:23Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=e0125262a2f5cefbfb3804117f8ab16e9ba13e29'/>
<id>urn:sha1:e0125262a2f5cefbfb3804117f8ab16e9ba13e29</id>
<content type='text'>
Merged the two for loops. We might get a little gain by overlapping
wait_on_bh and the memcpy operations.

Signed-off-by: Manish Sharma &lt;manishrma@gmail.com&gt;
Signed-off-by: Phillip Lougher &lt;phillip@squashfs.org.uk&gt;
</content>
</entry>
<entry>
<title>Squashfs: sanity check information from disk</title>
<updated>2013-08-29T00:23:29Z</updated>
<author>
<name>Dan Carpenter</name>
<email>dan.carpenter@oracle.com</email>
</author>
<published>2013-07-17T12:20:25Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=28d7b5684ba98e163ba37779fd09de01fac5261d'/>
<id>urn:sha1:28d7b5684ba98e163ba37779fd09de01fac5261d</id>
<content type='text'>
We read the size of the name from the disk, but a larger name than
expected would cause memory corruption.

Signed-off-by: Dan Carpenter &lt;dan.carpenter@oracle.com&gt;
Signed-off-by: Phillip Lougher &lt;phillip@squashfs.org.uk&gt;
</content>
</entry>
<entry>
<title>[readdir] convert squashfs</title>
<updated>2013-06-29T08:56:28Z</updated>
<author>
<name>Al Viro</name>
<email>viro@zeniv.linux.org.uk</email>
</author>
<published>2013-05-16T05:17:58Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=5f6039ce69605e40e9188437d8837a67f8056ec6'/>
<id>urn:sha1:5f6039ce69605e40e9188437d8837a67f8056ec6</id>
<content type='text'>
Signed-off-by: Al Viro &lt;viro@zeniv.linux.org.uk&gt;
</content>
</entry>
<entry>
<title>fs: Limit sys_mount to only request filesystem modules. (Part 3)</title>
<updated>2013-03-11T14:09:48Z</updated>
<author>
<name>Eric W. Biederman</name>
<email>ebiederm@xmission.com</email>
</author>
<published>2013-03-11T14:05:42Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=3e64fe5b21852375f2f53e7244ba697f1fee2fcf'/>
<id>urn:sha1:3e64fe5b21852375f2f53e7244ba697f1fee2fcf</id>
<content type='text'>
Somehow I failed to add the MODULE_ALIAS_FS for cifs, hostfs, hpfs,
squashfs, and udf despite what I thought were my careful checks :(

Add them now.

Signed-off-by: "Eric W. Biederman" &lt;ebiederm@xmission.com&gt;
</content>
</entry>
<entry>
<title>new helper: file_inode(file)</title>
<updated>2013-02-23T04:31:31Z</updated>
<author>
<name>Al Viro</name>
<email>viro@zeniv.linux.org.uk</email>
</author>
<published>2013-01-23T22:07:38Z</published>
<link rel='alternate' type='text/html' href='https://git.amat.us/linux/commit/?id=496ad9aa8ef448058e36ca7a787c61f2e63f0f54'/>
<id>urn:sha1:496ad9aa8ef448058e36ca7a787c61f2e63f0f54</id>
<content type='text'>
Signed-off-by: Al Viro &lt;viro@zeniv.linux.org.uk&gt;
</content>
</entry>
</feed>
