diff options
| author | Tom Rini <[email protected]> | 2026-02-23 13:45:55 -0600 |
|---|---|---|
| committer | Tom Rini <[email protected]> | 2026-02-23 13:45:55 -0600 |
| commit | 15bd3258174b8c8791d7779f66d26ece9545b1c0 (patch) | |
| tree | 634188f66b83e1554ffea95c4702df25b61ce20e /fs | |
| parent | ef65b15383c99f4562539a635fe166fb4d75c0e3 (diff) | |
| parent | 4f70106beafe30df8b0528a3d8b2543cd48fe241 (diff) | |
Merge tag 'v2026.04-rc3' into next
Prepare v2026.04-rc3
Diffstat (limited to 'fs')
| -rw-r--r-- | fs/squashfs/sqfs.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/fs/squashfs/sqfs.c b/fs/squashfs/sqfs.c index f668c26472e..9cb8b4afcdd 100644 --- a/fs/squashfs/sqfs.c +++ b/fs/squashfs/sqfs.c @@ -178,6 +178,11 @@ static int sqfs_frag_lookup(u32 inode_fragment_index, goto out; } + if (SQFS_METADATA_SIZE(header) > SQFS_METADATA_BLOCK_SIZE) { + ret = -EINVAL; + goto out; + } + entries = malloc(SQFS_METADATA_BLOCK_SIZE); if (!entries) { ret = -ENOMEM; |