tree ef68d8601812e1b190f67b69373ff5210191ea45
parent 4733fd328f14280900435d9dbae1487d110a4d56
author Tyler Hicks <tyhicks@linux.vnet.ibm.com> 1248807421 -0500
committer Linus Torvalds <torvalds@linux-foundation.org> 1248816366 -0700

eCryptfs: Check Tag 11 literal data buffer size

Tag 11 packets are stored in the metadata section of an eCryptfs file to
store the key signature(s) used to encrypt the file encryption key.
After extracting the packet length field to determine the key signature
length, a check is not performed to see if the length would exceed the
key signature buffer size that was passed into parse_tag_11_packet().

Thanks to Ramon de Carvalho Valle for finding this bug using fsfuzzer.

Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>
Cc: stable@kernel.org (2.6.27 and 30)
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>