opengnsys
/
ntfs-3g
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Rejected negative data length in readall() 

The negative data length of an attribute is an indication of a probable
corruption and must be rejected.
edge.strict_endians^2
Jean-Pierre André 2021-07-19 09:23:23 +02:00
parent e70d10d848
commit b95b4ba1a5
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
libntfs-3g/attrib.c
View File

@ -6930,9 +6930,10 @@ void *ntfs_attr_readall(ntfs_inode *ni, const ATTR_TYPES type,
* index bitmaps may need more, but still limited by
* the number of clusters.
*/
if ((na->data_size > 65536)
if (((u64)na->data_size > 65536)
&& ((type != AT_BITMAP)
|| ((na->data_size << 3) > ni->vol->nr_clusters))) {
|| ((u64)na->data_size >
(u64)((ni->vol->nr_clusters + 7) >> 3)))) {
ntfs_log_error("Corrupt attribute 0x%lx in inode %lld\n",
(long)le32_to_cpu(type),(long long)ni->mft_no);
errno = EOVERFLOW;