udf: Avoid run away loop when partition table length is corrupted
authorJan Kara <jack@suse.cz>
Wed, 27 Jun 2012 18:20:22 +0000 (20:20 +0200)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 12 Jul 2012 03:32:10 +0000 (04:32 +0100)
commit007871a045112d5e4228b69d9cf0fb95b73d3d71
tree5c28f91480bb18011519645df97ac6c0af6c0b96
parentdf2a300810d3e2b049ad363aa1081657a5eda8c6
udf: Avoid run away loop when partition table length is corrupted

commit adee11b2085bee90bd8f4f52123ffb07882d6256 upstream.

Check provided length of partition table so that (possibly maliciously)
corrupted partition table cannot cause accessing data beyond current buffer.

Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
fs/udf/super.c