1
0
Fork 0
alistair23-linux/fs/autofs
Tomas Bortoli 02f51d4593 autofs: fix slab out of bounds read in getname_kernel()
The autofs subsystem does not check that the "path" parameter is present
for all cases where it is required when it is passed in via the "param"
struct.

In particular it isn't checked for the AUTOFS_DEV_IOCTL_OPENMOUNT_CMD
ioctl command.

To solve it, modify validate_dev_ioctl(function to check that a path has
been provided for ioctl commands that require it.

Link: http://lkml.kernel.org/r/153060031527.26631.18306637892746301555.stgit@pluto.themaw.net
Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Signed-off-by: Ian Kent <raven@themaw.net>
Reported-by: syzbot+60c837b428dc84e83a93@syzkaller.appspotmail.com
Cc: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2018-07-14 11:11:09 -07:00
..
Kconfig autofs: Fix typo s/thenew new/the new/ in AUTOFS4_FS description 2018-06-12 12:31:19 -07:00
Makefile autofs: rename 'autofs' module back to 'autofs4' 2018-07-05 11:35:04 -07:00
autofs_i.h autofs: clean up includes 2018-06-07 17:34:40 -07:00
dev-ioctl.c autofs: fix slab out of bounds read in getname_kernel() 2018-07-14 11:11:09 -07:00
expire.c autofs: copy autofs4 to autofs 2018-06-07 17:34:39 -07:00
init.c autofs: rename 'autofs' module back to 'autofs4' 2018-07-05 11:35:04 -07:00
inode.c autofs: clean up includes 2018-06-07 17:34:40 -07:00
root.c autofs: clean up includes 2018-06-07 17:34:40 -07:00
symlink.c autofs: copy autofs4 to autofs 2018-06-07 17:34:39 -07:00
waitq.c autofs: small cleanup in autofs_getpath() 2018-06-07 17:34:40 -07:00