| Message ID | tencent_C51BB525D6BA72BB25338C9EB41B094B3608@qq.com (mailing list archive) |
|---|---|
| State | New, archived |
| Headers | show |
| Series | [arm64] ntfs3: fix oob in ntfs_listxattr | expand |
diff --git a/fs/ntfs3/xattr.c b/fs/ntfs3/xattr.c index 4274b6f31cfa..3b97508a7bf2 100644 --- a/fs/ntfs3/xattr.c +++ b/fs/ntfs3/xattr.c @@ -219,6 +219,9 @@ static ssize_t ntfs_list_ea(struct ntfs_inode *ni, char *buffer, if (!ea->name_len) break; + if (ea->name_len > ea_size) + break; + if (buffer) { /* Check if we can use field ea->name */ if (off + ea_size > size)
The length of name cannot exceed the space occupied by ea. Reported-and-tested-by: syzbot+65e940cfb8f99a97aca7@syzkaller.appspotmail.com Signed-off-by: Edward Adam Davis <eadavis@qq.com> --- fs/ntfs3/xattr.c | 3 +++ 1 file changed, 3 insertions(+)