containers / composefs

The reliability of disk images, the flexibility of files
Other
461 stars 36 forks source link

lib: Bail on xattr names > XATTR_NAME_MAX #314

Closed cgwalters closed 3 months ago

cgwalters commented 3 months ago

Just more of me poking randomly at mkcomposefs. Yes, we clearly need to wire up a fuzzer.

In this case, we have a check for xattr value length but would happily accept a key of any arbitrary length, generating a corrupted EROFS blob. fsck.erofs detects this.

Signed-off-by: Colin Walters walters@verbum.org