Re: [PATCH v2 1/4] squashfs: Fix integer overflow in sqfs_resolve_symlink()

On Fri, 02 Aug 2024 18:36:44 +0200, Richard Weinberger wrote:

A carefully crafted squashfs filesystem can exhibit an inode size of 0xffffffff, as a consequence malloc() will do a zero allocation. Later in the function the inode size is again used for copying data. So an attacker can overwrite memory. Avoid the overflow by using the __builtin_add_overflow() helper.

[...]

Applied to u-boot/next, thanks!