diff options
| author | Theodore Ts'o <tytso@mit.edu> | 2018-06-16 15:40:48 -0400 |
|---|---|---|
| committer | Andrew Lehmer <alehmer@google.com> | 2018-10-31 19:45:47 +0000 |
| commit | d8dbc90ca836ef5c46e701cb37e519c6c980787c (patch) | |
| tree | fd63731265aae33b064b9d222edb936244e31d55 /net/lapb/lapb_timer.c | |
| parent | f3c8dc90dae77b0ce70e32c0306c01922ac2f944 (diff) | |
ext4: never move the system.data xattr out of the inode body
commit 8cdb5240ec5928b20490a2bb34cb87e9a5f40226 upstream.
When expanding the extra isize space, we must never move the
system.data xattr out of the inode body. For performance reasons, it
doesn't make any sense, and the inline data implementation assumes
that system.data xattr is never in the external xattr block.
This addresses CVE-2018-10880
https://bugzilla.kernel.org/show_bug.cgi?id=200005
Bug: 116406509
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Greg Hackmann <ghackmann@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Change-Id: I4afee0790d80659112ef4b00ee0870bf1b985875
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions