squashfs: more metadata hardening
authorLinus Torvalds <torvalds@linux-foundation.org>
Mon, 30 Jul 2018 21:27:15 +0000 (14:27 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Tue, 31 Jul 2018 00:29:17 +0000 (17:29 -0700)
commitd512584780d3e6a7cacb2f482834849453d444a1
treee69a975786d0bff7cd3e117f88dc9b97380806e1
parent527838d470e3a6e79e8ee9d5ddf28920df2a196e
squashfs: more metadata hardening

Anatoly reports another squashfs fuzzing issue, where the decompression
parameters themselves are in a compressed block.

This causes squashfs_read_data() to be called in order to read the
decompression options before the decompression stream having been set
up, making squashfs go sideways.

Reported-by: Anatoly Trosinenko <anatoly.trosinenko@gmail.com>
Acked-by: Phillip Lougher <phillip.lougher@gmail.com>
Cc: stable@kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
fs/squashfs/block.c