10000 OSS-Fuzz issue 62691 · Issue #2509 · util-linux/util-linux · GitHub
[go: up one dir, main page]
Skip to content

OSS-Fuzz issue 62691 #2509

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
oss-fuzz-robot opened this issue Sep 25, 2023 · 0 comments · Fixed by #2510
Closed

OSS-Fuzz issue 62691 #2509

oss-fuzz-robot opened this issue Sep 25, 2023 · 0 comments · Fixed by #2510

Comments

@oss-fuzz-robot
Copy link

OSS-Fuzz has found a bug in this project. Please see https://oss-fuzz.com/testcase?key=6469694082908160 for details and reproducers.

This issue is mirrored from https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62691 and will auto-close if the status changes there.

If you have trouble accessing this report, please file an issue at https://github.com/google/oss-fuzz/issues/new.
@t-8ch t-8ch mentioned this issue Sep 25, 2023
Merged
karelzak pushed a commit to karelzak/util-linux-work that referenced this issue Nov 24, 2023
@t-8ch @karelzak
libblkid: (ntfs) validate that sector_size is a power of two
7e5056f 
The NTFS prober reads data based off an offset of the sector size.
If the sector size is unaligned and the read data is cached then other
probers can read unaligned values.

Sector sizes for NTFS actually only make sense as power-of-two so
validate that and as a sideeffect avoid the unaligned reads.

Also add the reproducer from OSS-Fuzz that found this issue.

Fixes util-linux#2509

Signed-off-by: Thomas Weißschuh <thomas@t-8ch.de>
ahmed-masud pushed a commit to safai-labs/util-linux that referenced this issue Feb 23, 2024
@t-8ch @ahmed-masud
libblkid: (ntfs) validate that sector_size is a power of two
dfa942a 
The NTFS prober reads data based off an offset of the sector size.
If the sector size is unaligned and the read data is cached then other
probers can read unaligned values.

Sector sizes for NTFS actually only make sense as power-of-two so
validate that and as a sideeffect avoid the unaligned reads.

Also add the reproducer from OSS-Fuzz that found this issue.

Fixes util-linux#2509

Signed-off-by: Thomas Weißschuh <thomas@t-8ch.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

libblkid: (ntfs) validate that sector_size is a power of two t-8ch/util-linux
1 participant
@oss-fuzz-robot
0