]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
minixfs: limit minixfs printks on corrupted dir i_size (CVE-2006-6058)
authorEric Sandeen <sandeen@redhat.com>
Wed, 17 Oct 2007 06:27:15 +0000 (23:27 -0700)
committerGreg Kroah-Hartman <gregkh@suse.de>
Fri, 16 Nov 2007 17:37:00 +0000 (09:37 -0800)
commitf0ae3188daf70ed07a4dfbeb133bef3a92838a15
tree918dd6d9bb4fd9727ab1fe9a3be497b50bd905f0
parentcdcf516bde56f6938642687c0a1cad98ad55c44e
minixfs: limit minixfs printks on corrupted dir i_size (CVE-2006-6058)

patch f44ec6f3f89889a469773b1fd894f8fcc07c29cf upstream.

This attempts to address CVE-2006-6058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6058

first reported at http://projects.info-pull.com/mokb/MOKB-17-11-2006.html

Essentially a corrupted minix dir inode reporting a very large
i_size will loop for a very long time in minix_readdir, minix_find_entry,
etc, because on EIO they just move on to try the next page.  This is
under the BKL, printk-storming as well.  This can lock up the machine
for a very long time.  Simply ratelimiting the printks gets things back
under control.  Make the message a bit more informative while we're here.

Signed-off-by: Eric Sandeen <sandeen@redhat.com>
Cc: Bodo Eggert <7eggert@gmx.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/minix/itree_v1.c
fs/minix/itree_v2.c