Miquel Raynal
2ac0baab4a
fs/squashfs: sqfs_read: Prevent arbitrary code execution ...
Following Jincheng's report, an out-of-band write leading to arbitrary
code execution is possible because on one side the squashfs logic
accepts directory names up to 65535 bytes (u16), while U-Boot fs logic
accepts directory names up to 255 bytes long.
Prevent such an exploit from happening by capping directory name sizes
to 255. Use a define for this purpose so that developers can link the
limitation to its source and eventually kill it some day by dynamically
allocating this array (if ever desired).
Link: https://lore.kernel.org/all/CALO=DHFB+yBoXxVr5KcsK0iFdg+e7ywko4-e+72kjbcS8JBfPw@mail.gmail.com
Reported-by: Jincheng Wang <jc.w4ng@gmail.com>
Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com>
Tested-by: Jincheng Wang <jc.w4ng@gmail.com>
2022-06-16 15:22:55 -04:00
2022-02-11 11:29:23 -05:00
2022-04-10 11:21:39 -04:00
2022-05-24 01:16:15 +01:00
2022-06-16 15:22:55 -04:00
2021-08-16 10:49:35 +02:00
2022-04-28 09:26:43 -04:00
2022-05-23 00:37:50 +01:00
2021-09-30 09:08:16 -04:00
2021-12-27 16:20:18 -05:00
2021-11-09 17:18:06 +05:30
2022-03-15 17:43:11 +08:00
2022-05-20 09:41:33 +02:00
2022-01-21 14:01:35 -05:00
2022-01-20 14:46:03 +01:00
2022-01-19 18:11:34 +01:00
2022-05-20 12:36:48 +02:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-10-05 08:46:23 -04:00
2022-04-25 10:00:04 -04:00
2022-04-21 14:32:40 -04:00
2022-01-19 18:11:34 +01:00
2022-04-11 10:00:30 -04:00
2022-04-10 08:44:13 +03:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-04-08 09:05:19 -04:00
2022-02-09 09:16:47 -05:00
2021-09-30 09:08:16 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-30 01:25:00 +00:00
2022-01-30 01:25:00 +00:00
2022-01-30 01:25:00 +00:00
2022-01-30 01:25:00 +00:00
2022-01-30 01:25:00 +00:00
2022-01-30 01:25:00 +00:00
2021-10-25 14:50:42 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-08-05 19:46:35 -04:00
2022-04-25 10:00:03 -04:00
2022-02-08 23:07:59 -05:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-04-25 10:00:04 -04:00
2022-04-25 10:00:04 -04:00
2022-01-19 18:11:34 +01:00
2022-04-25 10:00:04 -04:00
2022-01-19 18:11:34 +01:00
2022-05-02 09:58:13 -04:00
2022-04-25 10:00:04 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-04-06 14:01:42 -04:00
2022-05-28 10:59:27 +02:00
2022-01-19 18:11:34 +01:00
2022-03-30 13:02:55 -04:00
2022-03-30 13:02:55 -04:00
2021-12-27 16:20:18 -05:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-04-22 15:44:10 -04:00
2021-08-30 14:10:07 -04:00
2022-04-01 10:28:45 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-04-06 14:01:42 -04:00
2022-01-19 18:11:34 +01:00
2022-02-11 11:29:23 -05:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-04-25 10:00:04 -04:00
2021-09-30 09:08:16 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-09-25 09:46:15 -06:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-08-30 14:10:06 -04:00
2022-05-07 23:17:26 +02:00
2022-06-12 09:17:54 +02:00
2022-01-19 16:16:33 +01:00
2021-10-21 03:46:04 +02:00
2022-05-28 10:59:27 +02:00
2022-01-29 10:23:40 +01:00
2022-01-19 16:16:33 +01:00
2022-02-03 12:16:01 -05:00
2022-01-19 16:16:33 +01:00
2021-10-25 21:13:06 +02:00
2022-01-15 10:57:22 +01:00
2022-04-25 10:00:04 -04:00
2022-03-03 16:51:20 -05:00
2022-04-21 09:08:40 -04:00
2022-01-19 18:11:34 +01:00
2022-03-15 16:19:29 -04:00
2022-04-06 14:01:42 -04:00
2022-03-10 08:28:36 -05:00
2022-03-10 08:28:36 -05:00
2022-04-10 08:44:13 +03:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-11-30 16:43:28 +01:00
2022-01-20 12:40:20 -05:00
2022-02-16 14:19:29 -05:00
2021-08-11 10:36:10 +02:00
2022-04-10 08:44:13 +03:00
2022-06-16 15:22:55 -04:00
2022-01-19 18:11:34 +01:00
2021-07-07 19:52:22 -04:00
2022-03-16 16:40:56 +09:00
2022-04-26 17:18:39 +05:30
2021-08-09 14:46:51 +02:00
2022-01-15 18:53:16 +02:00
2021-09-30 09:08:16 -04:00
2022-05-19 21:39:36 +02:00
2021-09-30 09:08:16 -04:00
2021-04-10 08:04:42 -04:00
2022-04-22 10:35:14 +02:00
2022-04-12 15:36:17 +02:00
2022-01-12 14:21:24 -05:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-06-08 11:39:09 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-08-30 14:13:28 -04:00
2022-02-09 09:16:47 -05:00
2022-04-11 11:39:19 -04:00
2021-09-30 09:08:16 -04:00
2022-04-04 14:53:26 -04:00
2022-01-19 18:11:34 +01:00
2021-10-31 08:46:44 -04:00
2022-04-19 14:52:34 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-02-08 09:41:27 -05:00
2022-04-04 19:02:04 -04:00
2022-02-08 09:41:27 -05:00
2022-01-19 18:11:34 +01:00
2022-01-18 08:31:02 -05:00
2022-01-19 18:11:34 +01:00
2022-04-28 09:26:44 -04:00
2021-05-24 14:21:30 -04:00
2021-11-20 10:53:00 +01:00
2022-03-10 08:28:36 -05:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-04-11 10:00:30 -04:00
2021-09-30 09:08:16 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-05-07 23:17:26 +02:00
2022-05-04 07:05:51 +02:00
2022-01-24 10:35:10 -05:00
2022-06-15 15:39:56 +09:00
2022-04-08 10:46:22 -04:00
2021-12-27 08:41:38 -05:00
2022-01-12 14:21:24 -05:00
2021-09-28 12:03:20 -04:00
2021-07-23 07:13:25 -04:00
2021-09-30 09:08:16 -04:00
2022-03-28 08:22:17 -04:00
2021-12-27 16:20:18 -05:00
2022-06-03 11:15:24 -04:00
2021-09-21 10:08:24 +03:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-13 09:13:41 -07:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-05-06 14:39:15 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-03-25 13:35:50 -04:00
2022-01-19 18:11:34 +01:00
2022-05-03 18:33:29 -04:00
2022-05-23 13:52:02 -04:00
2022-01-19 18:11:34 +01:00
2022-04-15 08:10:32 -04:00
2022-01-19 18:11:34 +01:00
2021-07-07 19:52:24 -04:00
2022-04-21 12:44:23 +02:00
2022-01-19 18:11:34 +01:00
2022-02-11 09:00:47 -05:00
2021-04-12 17:44:55 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-02-08 11:00:03 -05:00
2022-01-19 18:11:34 +01:00
2022-05-05 15:06:02 -04:00
2022-04-23 22:05:33 +02:00
2022-03-02 17:42:06 -05:00
2022-03-02 17:42:06 -05:00
2022-02-09 09:16:48 -05:00
2022-03-16 18:10:19 +09:00
2022-01-20 11:35:29 +01:00
2022-01-19 18:11:34 +01:00
2022-04-01 16:56:53 -04:00
2022-04-01 15:03:13 -04:00
2022-04-01 16:56:54 -04:00
2022-02-28 11:59:35 +05:30
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-05-23 09:33:10 -04:00
2021-06-28 11:56:06 +05:30
2022-05-23 09:33:10 -04:00
2022-01-19 18:11:34 +01:00
2022-05-02 09:58:13 -04:00
2021-12-26 23:33:24 +01:00
2021-09-30 08:08:56 -04:00
2022-04-06 14:03:17 -04:00
2022-01-26 23:23:17 +01:00
2021-09-04 12:26:01 -04:00
2022-04-04 23:24:17 +01:00
2022-01-19 18:11:34 +01:00
2021-05-04 07:57:18 -04:00
2021-11-04 08:57:19 +01:00
2022-04-14 15:39:15 -04:00
2021-12-31 06:44:29 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-11-23 09:57:55 +02:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2022-02-11 00:03:48 +01:00
2021-09-17 12:10:44 -04:00
2021-09-17 12:10:44 -04:00
2022-01-19 18:11:34 +01:00
2022-01-19 18:11:34 +01:00
2021-09-30 09:08:16 -04:00
2022-01-19 18:11:34 +01:00
2022-03-28 20:17:20 +02:00
2022-01-19 18:11:34 +01:00
2022-04-10 08:44:13 +03:00
2022-04-25 10:00:03 -04:00
2021-05-13 13:09:09 -04:00
2021-05-13 13:09:09 -04:00
2022-01-19 18:11:34 +01:00
2022-06-07 08:45:35 +02:00
2022-01-19 18:11:34 +01:00
2022-04-05 15:13:13 +02:00
2ac0baab4a