Skip to content

ecryptfs: split packet parser length fixes

Yichong Chen ecryptfs lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v2 Latest3 patches 1 replyIn review

Changes in v2 from the cover letter

- Split the original patch into three independent fixes.
- Dropped the unrelated trailing blank line removal in keystore.c.

Patches in v2 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3ecryptfs: pass packet set buffer size to parserfs/ecryptfs/crypto.c fs/ecryptfs/ecryptfs_kernel.h fs/ecryptfs/keystore.c+23 -50 replies
2/3ecryptfs: fix tag 11 packet exact-fit size checkfs/ecryptfs/keystore.c+1 -10 replies
3/3ecryptfs: reject too-small tag 70 packetsfs/ecryptfs/keystore.c+6 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v2 yet.

Read the v2 thread

Cover letter [PATCH v2 0/3] ecryptfs: split packet parser length fixes

This v2 splits the packet parser hardening into three separate fixes as requested by Tyler Hicks:

1. pass the actual packet set buffer size into ecryptfs_parse_packet_set()
2. fix the tag 11 exact-fit size check
3. reject too-small tag 70 packet bodies before size subtraction

Changes in v2:
- Split the original patch into three independent fixes.
- Dropped the unrelated trailing blank line removal in keystore.c.

Yichong Chen (3):
ecryptfs: pass packet set buffer size to parser
ecryptfs: fix tag 11 packet exact-fit size check
ecryptfs: reject too-small tag 70 packets

 fs/ecryptfs/crypto.c          |  2 +-
 fs/ecryptfs/ecryptfs_kernel.h |  3 ++-
 fs/ecryptfs/keystore.c        | 31 +++++++++++++++++++++++++++----
 3 files changed, 30 insertions(+), 6 deletions(-)
Signature · 1 line
2.51.0