[PATCH] erofs-utils: xattr: fix OOB access due to alignment

Li GuiFu bluce.lee at aliyun.com
Sat Dec 5 18:35:41 AEDT 2020



On 2020/11/27 22:33, Gao Xiang wrote:
> From: Gao Xiang <hsiangkao at aol.com>
> 
> erofs_buf_write_bhops can only be safely used for block-aligned
> buffers, otherwise, it could write random out-of-bound data due
> to buffer alignment. Such random data is meaningless but it does
> harm to reproducable builds.
> 
> Fixes: 116ac0a254fc ("erofs-utils: introduce shared xattr support")
> Reported-by: Huang Jianan <huangjianan at oppo.com>
> Signed-off-by: Gao Xiang <hsiangkao at aol.com>
> ---
>  lib/xattr.c | 18 +++++++++++++++++-
>  1 file changed, 17 insertions(+), 1 deletion(-)
> 

It looks good
Reviewed-by: Li Guifu <bluce.lee at aliyun.com>
Thanks,


More information about the Linux-erofs mailing list