Kees Cook 02e2a5bfeb mac: validate mac_partition is within sector ...

If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single
512 byte sector would be read (secsize / 512). However the partition
structure would be located past the end of the buffer (secsize % 512).

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Jens Axboe <axboe@fb.com>

2015-11-20 08:49:28 -07:00

3.5 KiB

Raw Blame History

View Raw