Haimin Zhang d925b7e78b jfs: prevent NULL deref in diFree
[ Upstream commit a53046291020ec41e09181396c1e829287b48d47 ]

Add validation check for JFS_IP(ipimap)->i_imap to prevent a NULL deref
in diFree since diFree uses it without do any validations.
When function jfs_mount calls diMount to initialize fileset inode
allocation map, it can fail and JFS_IP(ipimap)->i_imap won't be
initialized. Then it calls diFreeSpecial to close fileset inode allocation
map inode and it will flow into jfs_evict_inode. Function jfs_evict_inode
just validates JFS_SBI(inode->i_sb)->ipimap, then calls diFree. diFree use
JFS_IP(ipimap)->i_imap directly, then it will cause a NULL deref.

Reported-by: TCS Robot <tcs_robot@tencent.com>
Signed-off-by: Haimin Zhang <tcs_kernel@tencent.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-13 20:59:13 +02:00
..
2021-04-12 15:04:29 +02:00
2022-04-13 20:59:13 +02:00
2021-04-12 15:04:29 +02:00
2022-04-08 14:23:51 +02:00
2021-04-12 15:04:29 +02:00
2020-09-21 08:59:26 -07:00
2021-11-18 19:16:48 +01:00
2021-04-12 15:04:29 +02:00
2021-06-23 09:21:52 -05:00
2021-01-24 14:27:17 +01:00