path: root/crypto
diff options
authorTyler Hicks <tyhicks@linux.vnet.ibm.com>2009-07-28 13:57:01 -0500
committerGreg Kroah-Hartman <gregkh@suse.de>2009-07-30 14:40:35 -0700
commit4df9205138cd0c610b52eefe1ecdafdaf65cfb12 (patch)
tree9a2f2d543dbc4d697b71863fccb04f2fb80acbfc /crypto
parent57bee88245247744cd953ab3c410ba637ba6e0c3 (diff)
eCryptfs: Check Tag 11 literal data buffer size (CVE-2009-2406)
commit 6352a29305373ae6196491e6d4669f301e26492e upstream. Tag 11 packets are stored in the metadata section of an eCryptfs file to store the key signature(s) used to encrypt the file encryption key. After extracting the packet length field to determine the key signature length, a check is not performed to see if the length would exceed the key signature buffer size that was passed into parse_tag_11_packet(). Thanks to Ramon de Carvalho Valle for finding this bug using fsfuzzer. Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions