)]}'
{
  "commit": "8f6626bd6594a78f454d02b27b74a580c890cab9",
  "tree": "b818d0d83bb97e24994cf681f8cdb959a1c0643b",
  "parents": [
    "00cc31a869e2f635e6455685c91c4c9045c96ebd"
  ],
  "author": {
    "name": "Adriano Cordova",
    "email": "adrianox@gmail.com",
    "time": "Fri Oct 16 14:06:33 2026 -0300"
  },
  "committer": {
    "name": "Tyler Hicks",
    "email": "code@tyhicks.com",
    "time": "Thu Oct 22 10:51:04 2026 -0500"
  },
  "message": "ecryptfs: bound session_key_encryption_key_bytes in auth tok\n\nLet ecryptfs_verify_auth_tok_from_key() validate the password\u0027s\nsession_key_encryption_key_bytes length. When it is larger than\nECRYPTFS_MAX_KEY_BYTES, md5() reads past session_key_encryption_key[].\nReject such auth toks.\n\nFixes: 9c79f34f7ee7 (\"eCryptfs: Filename Encryption: Tag 70 packets\")\nCc: stable@vger.kernel.org\nReported-by: syzbot+03c68e42ce4b33f7ce9b@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003d03c68e42ce4b33f7ce9b\nTested-by: syzbot+03c68e42ce4b33f7ce9b@syzkaller.appspotmail.com\nSigned-off-by: Adriano Cordova \u003cadrianox@gmail.com\u003e\nSigned-off-by: Tyler Hicks \u003ccode@tyhicks.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "51651314b7a620cdc3e1c692a657413aeb765663",
      "old_mode": 33188,
      "old_path": "fs/ecryptfs/keystore.c",
      "new_id": "c2ba230c71fde0dd0e1c119f58db8af5e9cd6986",
      "new_mode": 33188,
      "new_path": "fs/ecryptfs/keystore.c"
    }
  ]
}
