reiserfs: fix kernel panic on corrupted directory
authorLepton Wu <ytht.net@gmail.com>
Wed, 17 Oct 2007 06:29:50 +0000 (23:29 -0700)
committerLinus Torvalds <torvalds@woody.linux-foundation.org>
Wed, 17 Oct 2007 15:42:57 +0000 (08:42 -0700)
commit80eb68d23897126e7f25e2b3689bc27fb8cdde17
treef054c849b1e8856912050342fcb27d83a6f42830
parenta6cd6bf9f8cab154a4a086fe786bd7422954d8dc
reiserfs: fix kernel panic on corrupted directory

When reading corrupted reiserfs directory data, d_reclen could be a
negative number or a big positive number, this can lead to kernel panic or
oop.  The following patch adds a sanity check.

Signed-off-by: Lepton Wu <ytht.net@gmail.com>
Cc: Chris Mason <chris.mason@oracle.com>
Cc: Jeff Mahoney <jeffm@suse.com>
Cc: "Vladimir V. Saveliev" <vs@namesys.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
fs/reiserfs/dir.c