Re: [PATCH 2/4] squashfs: Fix integer overflow in sqfs_inode_size()

Hi Richard,

richard@nod.at wrote on Fri, 12 Jul 2024 10:23:42 +0200:

A carefully crafted squashfs filesystem can exhibit an extremly large inode size and overflow the calculation in sqfs_inode_size(). As a consequence, the squashfs driver will read from wrong locations.

Fix by using __builtin_add_overflow() to detect the overflow.

Signed-off-by: Richard Weinberger richard@nod.at

Reviewed-by: Miquel Raynal miquel.raynal@bootlin.com

Thanks, Miquèl