diff options
| author | Tyler Hicks <[email protected]> | 2012-01-12 11:30:44 +0100 |
|---|---|---|
| committer | Tyler Hicks <[email protected]> | 2012-01-25 14:43:39 -0600 |
| commit | db10e556518eb9d21ee92ff944530d84349684f4 (patch) | |
| tree | 84a82f496a4fe4ee90812b5d7f2cd358f9730911 /lib/mpi/mpiutil.c | |
| parent | bb4503615d95d6826b7907986ad574e3157877e8 (diff) | |
eCryptfs: Sanitize write counts of /dev/ecryptfs
A malicious count value specified when writing to /dev/ecryptfs may
result in a a very large kernel memory allocation.
This patch peeks at the specified packet payload size, adds that to the
size of the packet headers and compares the result with the write count
value. The resulting maximum memory allocation size is approximately 532
bytes.
Signed-off-by: Tyler Hicks <[email protected]>
Reported-by: Sasha Levin <[email protected]>
Cc: <[email protected]>
Diffstat (limited to 'lib/mpi/mpiutil.c')
0 files changed, 0 insertions, 0 deletions