# git rev-parse -q --verify 01cfb7937a9af2abb1136c7e89fbf3fd92952956^{commit} 01cfb7937a9af2abb1136c7e89fbf3fd92952956 already have revision, skipping fetch # git checkout -q -f -B kisskb 01cfb7937a9af2abb1136c7e89fbf3fd92952956 # git clean -qxdf # < git log -1 # commit 01cfb7937a9af2abb1136c7e89fbf3fd92952956 # Author: Linus Torvalds # Date: Sun Jul 29 12:44:46 2018 -0700 # # squashfs: be more careful about metadata corruption # # Anatoly Trosinenko reports that a corrupted squashfs image can cause a # kernel oops. It turns out that squashfs can end up being confused about # negative fragment lengths. # # The regular squashfs_read_data() does check for negative lengths, but # squashfs_read_metadata() did not, and the fragment size code just # blindly trusted the on-disk value. Fix both the fragment parsing and # the metadata reading code. # # Reported-by: Anatoly Trosinenko # Cc: Al Viro # Cc: Phillip Lougher # Cc: stable@kernel.org # Signed-off-by: Linus Torvalds # < /opt/cross/kisskb/korg/gcc-8.1.0-nolibc/hppa-linux/bin/hppa-linux-gcc --version # < git log --format=%s --max-count=1 01cfb7937a9af2abb1136c7e89fbf3fd92952956 # < make -s -j 120 ARCH=parisc O=/kisskb/build/linus_parisc-allnoconfig_parisc CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/hppa-linux/bin/hppa-linux- allnoconfig # make -s -j 120 ARCH=parisc O=/kisskb/build/linus_parisc-allnoconfig_parisc CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/hppa-linux/bin/hppa-linux- :1335:2: warning: #warning syscall rseq not implemented [-Wcpp] /kisskb/src/arch/parisc/kernel/pci-dma.c:335:12: warning: 'proc_pcxl_dma_show' defined but not used [-Wunused-function] static int proc_pcxl_dma_show(struct seq_file *m, void *v) ^~~~~~~~~~~~~~~~~~ In function 'fill_kobj_path', inlined from 'kobject_get_path' at /kisskb/src/lib/kobject.c:155:2: /kisskb/src/lib/kobject.c:128:3: warning: 'strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation] strncpy(path + length, kobject_name(parent), cur); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ /kisskb/src/lib/kobject.c: In function 'kobject_get_path': /kisskb/src/lib/kobject.c:125:13: note: length computed here int cur = strlen(kobject_name(parent)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ Completed OK # rm -rf /kisskb/build/linus_parisc-allnoconfig_parisc # Build took: 0:00:09.546280