|
 |
003ee8 |
From 1e9e770f4bc7f3d80e09ecd1df58575fad064163 Mon Sep 17 00:00:00 2001
|
|
|
003ee8 |
From: Mike Fleetwood <mike.fleetwood@googlemail.com>
|
|
|
003ee8 |
Date: Sun, 28 Sep 2014 16:15:48 +0100
|
|
|
003ee8 |
Subject: [PATCH 4/6] lib-fs-resize: Prevent crash resizing FAT16 file systems
|
|
|
003ee8 |
|
|
|
003ee8 |
Resizing FAT16 file system crashes in libparted/fs/r/fat/resize.c
|
|
|
003ee8 |
create_resize_context() because it was dereferencing NULL pointer
|
|
|
003ee8 |
fs_info->info_sector to copy the info_sector.
|
|
|
003ee8 |
|
|
|
003ee8 |
Only FAT32 file systems have info_sector populated by fat_open() ->
|
|
|
003ee8 |
fat_info_sector_read(). FAT12 and FAT16 file systems don't have an
|
|
|
003ee8 |
info_sector so pointer fs_info->info_sector remains assigned NULL from
|
|
|
003ee8 |
fat_alloc(). When resizing a FAT file system create_resize_context()
|
|
|
003ee8 |
was always dereferencing fs_info->info_sector to memory copy the
|
|
|
003ee8 |
info_sector, hence it crashed for FAT12 and FAT16.
|
|
|
003ee8 |
|
|
|
003ee8 |
Make create_resize_context() only copy the info_sector for FAT32 file
|
|
|
003ee8 |
systems.
|
|
|
003ee8 |
|
|
|
003ee8 |
Reported by Christian Hesse in
|
|
|
003ee8 |
https://bugzilla.gnome.org/show_bug.cgi?id=735669
|
|
|
003ee8 |
---
|
|
|
003ee8 |
NEWS | 4 ++++
|
|
|
003ee8 |
libparted/fs/r/fat/resize.c | 12 +++++++++---
|
|
|
003ee8 |
2 files changed, 13 insertions(+), 3 deletions(-)
|
|
|
003ee8 |
|
|
|
003ee8 |
diff --git a/NEWS b/NEWS
|
|
|
003ee8 |
index 297b0a5..da7db50 100644
|
|
|
003ee8 |
--- a/NEWS
|
|
|
003ee8 |
+++ b/NEWS
|
|
|
003ee8 |
@@ -2,6 +2,10 @@ GNU parted NEWS -*- outline -*-
|
|
|
003ee8 |
|
|
|
003ee8 |
* Noteworthy changes in release ?.? (????-??-??) [?]
|
|
|
003ee8 |
|
|
|
003ee8 |
+** Bug Fixes
|
|
|
003ee8 |
+
|
|
|
003ee8 |
+ libparted-fs-resize: Prevent crash resizing FAT16 file systems.
|
|
|
003ee8 |
+
|
|
|
003ee8 |
|
|
|
003ee8 |
* Noteworthy changes in release 3.2 (2014-07-28) [stable]
|
|
|
003ee8 |
|
|
|
003ee8 |
diff --git a/libparted/fs/r/fat/resize.c b/libparted/fs/r/fat/resize.c
|
|
|
003ee8 |
index 919acf0..bfe60a0 100644
|
|
|
003ee8 |
--- a/libparted/fs/r/fat/resize.c
|
|
|
003ee8 |
+++ b/libparted/fs/r/fat/resize.c
|
|
|
003ee8 |
@@ -668,11 +668,17 @@ create_resize_context (PedFileSystem* fs, const PedGeometry* new_geom)
|
|
|
003ee8 |
|
|
|
003ee8 |
/* preserve boot code, etc. */
|
|
|
003ee8 |
new_fs_info->boot_sector = ped_malloc (new_geom->dev->sector_size);
|
|
|
003ee8 |
- new_fs_info->info_sector = ped_malloc (new_geom->dev->sector_size);
|
|
|
003ee8 |
memcpy (new_fs_info->boot_sector, fs_info->boot_sector,
|
|
|
003ee8 |
new_geom->dev->sector_size);
|
|
|
003ee8 |
- memcpy (new_fs_info->info_sector, fs_info->info_sector,
|
|
|
003ee8 |
- new_geom->dev->sector_size);
|
|
|
003ee8 |
+ new_fs_info->info_sector = NULL;
|
|
|
003ee8 |
+ if (fs_info->fat_type == FAT_TYPE_FAT32)
|
|
|
003ee8 |
+ {
|
|
|
003ee8 |
+ PED_ASSERT (fs_info->info_sector != NULL);
|
|
|
003ee8 |
+ new_fs_info->info_sector =
|
|
|
003ee8 |
+ ped_malloc (new_geom->dev->sector_size);
|
|
|
003ee8 |
+ memcpy (new_fs_info->info_sector, fs_info->info_sector,
|
|
|
003ee8 |
+ new_geom->dev->sector_size);
|
|
|
003ee8 |
+ }
|
|
|
003ee8 |
|
|
|
003ee8 |
new_fs_info->logical_sector_size = fs_info->logical_sector_size;
|
|
|
003ee8 |
new_fs_info->sector_count = new_geom->length;
|
|
|
003ee8 |
--
|
|
|
003ee8 |
1.9.3
|
|
|
003ee8 |
|