Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 13 Apr 2019 20:49:16 +0000 (UTC)
From:      "Pedro F. Giffuni" <pfg@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-11@freebsd.org
Subject:   svn commit: r346189 - stable/11/sys/fs/ext2fs
Message-ID:  <201904132049.x3DKnG4H047939@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: pfg
Date: Sat Apr 13 20:49:16 2019
New Revision: 346189
URL: https://svnweb.freebsd.org/changeset/base/346189

Log:
  MFC r344755 (by fsu@)
  Fix integer overflow possibility.
  
  Reported by:	Christopher Krah, Thomas Barabosch, and Jan-Niclas Hilgert
  		of Fraunhofer FKIE
  Reported as:    FS-2-EXT2-1: Out-of-Bounds Write in nmount (ext2_vget)
  Reviewed by:    pfg
  MFC after:      1 week
  
  Differential Revision:    https://reviews.freebsd.org/D19326

Modified:
  stable/11/sys/fs/ext2fs/ext2_vfsops.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/fs/ext2fs/ext2_vfsops.c
==============================================================================
--- stable/11/sys/fs/ext2fs/ext2_vfsops.c	Sat Apr 13 19:23:11 2019	(r346188)
+++ stable/11/sys/fs/ext2fs/ext2_vfsops.c	Sat Apr 13 20:49:16 2019	(r346189)
@@ -940,8 +940,8 @@ ext2_vget(struct mount *mp, ino_t ino, int flags, stru
 	struct buf *bp;
 	struct vnode *vp;
 	struct thread *td;
-	int i, error;
-	int used_blocks;
+	unsigned int i, used_blocks;
+	int error;
 
 	td = curthread;
 	error = vfs_hash_get(mp, ino, flags, td, vpp, NULL, NULL);



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201904132049.x3DKnG4H047939>