| commit | 04c66cb25f36d31c6f33196c9a7a8d206012cbba | [log] [tgz] |
|---|---|---|
| author | Darrick J. Wong <darrick.wong@oracle.com> | Sat May 16 20:50:21 2015 -0400 |
| committer | Theodore Ts'o <tytso@mit.edu> | Sat May 16 20:50:21 2015 -0400 |
| tree | cc8001ff634a5102a9df0dfacaa7719d618d91ae | |
| parent | f008143cf5bfb93b5f5a0cb7018091b6f38301f8 [diff] |
e2fsck: fix buffer overrun in revoke block scanning Check the value of r_count to ensure that we never try to read revoke records past the end of the revoke block. It turns out that the journal writing code in debugfs was also playing fast and loose with the r_count, so fix that as well. The Coverity bug was 1297508. Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com> Signed-off-by: Theodore Ts'o <tytso@mit.edu>