diff options
| author | Yu Watanabe <watanabe.yu+github@gmail.com> | 2020-12-16 04:44:31 +0900 |
|---|---|---|
| committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2020-12-16 04:56:35 +0900 |
| commit | f2bd032044ca3cd4b454dd0ba86719effcf34dc0 (patch) | |
| tree | 29851ab47eb6042a943e888877721eb4ae0c0826 | |
| parent | adce225a104d0b7503aa7322db15d1c6dd8b8093 (diff) | |
| download | systemd-f2bd032044ca3cd4b454dd0ba86719effcf34dc0.tar.gz | |
journal: refuse data which contain invalid fields
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25353.
| -rw-r--r-- | src/journal/journal-file.c | 3 | ||||
| -rw-r--r-- | test/fuzz/fuzz-journal-remote/oss-fuzz-25353 | bin | 0 -> 45 bytes |
2 files changed, 3 insertions, 0 deletions
diff --git a/src/journal/journal-file.c b/src/journal/journal-file.c index 18dc3072b4..fa117ab63c 100644 --- a/src/journal/journal-file.c +++ b/src/journal/journal-file.c @@ -1572,6 +1572,9 @@ static int journal_file_append_field( assert(f); assert(field && size > 0); + if (!journal_field_valid(field, size, true)) + return -EBADMSG; + hash = journal_file_hash_data(f, field, size); r = journal_file_find_field_object_with_hash(f, field, size, hash, &o, &p); diff --git a/test/fuzz/fuzz-journal-remote/oss-fuzz-25353 b/test/fuzz/fuzz-journal-remote/oss-fuzz-25353 Binary files differnew file mode 100644 index 0000000000..94e5fbb93e --- /dev/null +++ b/test/fuzz/fuzz-journal-remote/oss-fuzz-25353 |