eCryptfs: parse_tag_3_packet check tag 3 packet encrypted key size (CVE-2009-2407)
authorRamon de Carvalho Valle <ramon@risesecurity.org>
Tue, 28 Jul 2009 18:58:22 +0000 (13:58 -0500)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 30 Jul 2009 23:06:12 +0000 (16:06 -0700)
commit44c470335d131e943fbaa4d34eb42a555591a478
tree374743d85d682a82da274cb1ab814625f91b023c
parent77773e094d22e44976a559b03d33726d24b3d817
eCryptfs: parse_tag_3_packet check tag 3 packet encrypted key size (CVE-2009-2407)

commit f151cd2c54ddc7714e2f740681350476cda03a28 upstream.

The parse_tag_3_packet function does not check if the tag 3 packet contains a
encrypted key size larger than ECRYPTFS_MAX_ENCRYPTED_KEY_BYTES.

Signed-off-by: Ramon de Carvalho Valle <ramon@risesecurity.org>
[tyhicks@linux.vnet.ibm.com: Added printk newline and changed goto to out_free]
Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/ecryptfs/keystore.c