diff options
| author | Stefan Brüns <stefan.bruens@rwth-aachen.de> | 2016-10-09 20:15:27 +0200 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2016-10-24 08:04:36 -0400 |
| commit | d1bdf22461e9f0638d4ddca0ccccfe61f8a653cf (patch) | |
| tree | 3243614899dfb2f8b49cb1995aac1765fe5f025f /dts | |
| parent | 15bf8c4f93020663b443b817a0192498bd9cd3f0 (diff) | |
| download | u-boot-d1bdf22461e9f0638d4ddca0ccccfe61f8a653cf.zip u-boot-d1bdf22461e9f0638d4ddca0ccccfe61f8a653cf.tar.gz u-boot-d1bdf22461e9f0638d4ddca0ccccfe61f8a653cf.tar.bz2 | |
ext4: Fix handling of direntlen in unlink_filename
The direntlen checks were quite bogus, i.e. the loop termination used
"len + offset == blocksize" (exact match only), and checked for a
direntlen less than 0. The latter can never happen as the len is
unsigned, this has been reported by Coverity, CID 153384.
Use the same code as in search_dir for directory traversal. This code
has the correct checks for direntlen >= sizeof(struct dirent), and
offset < blocksize.
Signed-off-by: Stefan Brüns <stefan.bruens@rwth-aachen.de>
Reported-by: Coverity (CID: 153383, 153384)
Reviewed-by: Tom Rini <trini@konsulko.com>
Reviewed-by: Lukasz Majewski <l.majewski@samsung.com>
Diffstat (limited to 'dts')
0 files changed, 0 insertions, 0 deletions