Re: [PATCH v2] fs/erofs: fix an integer overflow in symlink resolution

2025-02-18 Thread Tom Rini
On Tue, Feb 18, 2025 at 03:24:08PM -0800, Jonathan Bar Or wrote: > That's great! Thank you for your work! > > Any expected fixes on the other issues I raised Tom? > I'm asking specifically because GRUB2 maintainers are working on > solving very similar issues in their repository for SquashFS (bein

Re: [PATCH v2] fs/erofs: fix an integer overflow in symlink resolution

2025-02-18 Thread Jonathan Bar Or
That's great! Thank you for your work! Any expected fixes on the other issues I raised Tom? I'm asking specifically because GRUB2 maintainers are working on solving very similar issues in their repository for SquashFS (being rolled out right now). It'd be best to solve ASAP as people might realize

Re: [PATCH v2] fs/erofs: fix an integer overflow in symlink resolution

2025-02-18 Thread Tom Rini
On Thu, 13 Feb 2025 19:28:47 +0800, Gao Xiang wrote: > See the original report [1], otherwise len + 1 will be overflowed. > > Note that EROFS archive can record arbitary symlink sizes in principle, > so we don't assume a short number like 4096. > > [1] https://lore.kernel.org/r/20250210164151.GN