2606ac97d86d8952ffcdd8f8513b1499c10bf8
parent c963343a1150106819773e828c9b237ed977615b
author Bob Copeland <me@bobcopeland.com> 1218786047 -0700
committer Linus Torvalds <torvalds@linux-foundation.org> 1218814544 -0700

omfs: fix oops when file metadata is corrupted

A fuzzed fileystem image failed with OMFS when the extent count was
used in a loop without being checked against the max number of extents.
It also provoked a signed division for an array index that was checked
as if unsigned, leading to index by -1.

omfsck will be updated to fix these cases, in the meantime bail out
gracefully.

Reported-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: Bob Copeland <me@bobcopeland.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
©†