mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
* fs/ntfs : use-after-free Read in ntfs_attr_find
@ 2023-08-22 17:44 Manas Ghandat
  0 siblings, 0 replies; only message in thread
From: Manas Ghandat @ 2023-08-22 17:44 UTC (permalink / raw)
  To: anton, linkinjeon, syzbot+ef50f8eb00b54feb7ba2
  Cc: linux-ntfs-dev, linux-kernel, Linux-kernel-mentees

Hi,

I was looking at this syzbot issue : 
https://syzkaller.appspot.com/bug?extid=ef50f8eb00b54feb7ba2

While debugging I found that when we are traversing through the 
attribute list, there is case when the next attribute is null (most 
likely we are traversing out of the list) and thus there is this error. 
I was wondering if we could add a size field to this attribute list. 
This would fix this issue. Currently we are just parsing to the next 
attribute using the length field.



^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2023-08-22 17:44 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-08-22 17:44 fs/ntfs : use-after-free Read in ntfs_attr_find Manas Ghandat

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®