[Midnightbsd-cvs] [MidnightBSD/src] 0db226: Security update for UDF issue.

Lucas Holt noreply at github.com
Wed Sep 23 10:58:37 EDT 2020


  Branch: refs/heads/stable/1.2
  Home:   https://github.com/MidnightBSD/src
  Commit: 0db22662a5c8dcdfb8b9a5f2f9963d80f4b21ee0
      https://github.com/MidnightBSD/src/commit/0db22662a5c8dcdfb8b9a5f2f9963d80f4b21ee0
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2020-09-23 (Wed, 23 Sep 2020)

  Changed paths:
    M UPDATING
    M sys/conf/newvers.sh
    M sys/fs/udf/udf_vfsops.c

  Log Message:
  -----------
  Security update for UDF issue.

udf: Validate the full file entry length

Otherwise a corrupted file entry containing invalid extended attribute
lengths or allocation descriptor lengths can trigger an overflow when
the file entry is loaded.




More information about the Midnightbsd-cvs mailing list