1
0
Fork 0
remarkable-linux/fs/autofs4
Tomas Bortoli 00235ab800 autofs: fix slab out of bounds read in getname_kernel()
commit 02f51d4593 upstream.

The autofs subsystem does not check that the "path" parameter is present
for all cases where it is required when it is passed in via the "param"
struct.

In particular it isn't checked for the AUTOFS_DEV_IOCTL_OPENMOUNT_CMD
ioctl command.

To solve it, modify validate_dev_ioctl(function to check that a path has
been provided for ioctl commands that require it.

Link: http://lkml.kernel.org/r/153060031527.26631.18306637892746301555.stgit@pluto.themaw.net
Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Signed-off-by: Ian Kent <raven@themaw.net>
Reported-by: syzbot+60c837b428dc84e83a93@syzkaller.appspotmail.com
Cc: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-22 14:28:49 +02:00
..
Kconfig Fix dead URLs to ftp.kernel.org 2017-03-28 16:16:52 +02:00
Makefile autofs4: add miscellaneous device for ioctls 2008-10-16 11:21:39 -07:00
autofs_i.h autofs: non functional header inclusion cleanup 2017-09-08 18:26:50 -07:00
dev-ioctl.c autofs: fix slab out of bounds read in getname_kernel() 2018-07-22 14:28:49 +02:00
expire.c autofs - dont hold spin lock over direct mount expire 2016-12-03 20:51:50 -05:00
init.c autofs4: coding style fixes 2016-03-15 16:55:16 -07:00
inode.c don't open-code file_inode() 2016-12-04 18:29:28 -05:00
root.c autofs: mount point create should honour passed in mode 2018-04-24 09:36:39 +02:00
symlink.c vfs: remove ".readlink = generic_readlink" assignments 2016-12-09 16:45:04 +01:00
waitq.c autofs: fix careless error in recent commit 2017-12-20 10:10:17 +01:00