iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs/btrfs
History
David Sterba 09450e240a btrfs: send: limit number of clones and allocated memory size 
[ Upstream commit 33e17b3f5ab74af12aca58c515bc8424ff69a343 ]

The arg->clone_sources_count is u64 and can trigger a warning when a
huge value is passed from user space and a huge array is allocated.
Limit the allocated memory to 8MiB (can be increased if needed), which
in turn limits the number of clone sources to 8M / sizeof(struct
clone_root) = 8M / 40 = 209715.  Real world number of clones is from
tens to hundreds, so this is future proof.

Reported-by: syzbot+4376a9a073770c173269@syzkaller.appspotmail.com
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-03-03 11:40:07 +01:00
..
tests
btrfs: remove pointless and double ulist frees in error paths of qgroup tests
2022-11-25 17:40:22 +01:00
acl.c
Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
2019-03-23 20:10:00 +01:00
async-thread.c
btrfs: fix memory ordering between normal and ordered work functions
2021-11-26 11:36:23 +01:00
async-thread.h
Btrfs: fix crash during unmount due to race with delayed inode workers
2020-04-17 10:48:49 +02:00
backref.c
btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
2022-11-10 17:46:52 +01:00
backref.h
…
btrfs_inode.h
btrfs: use tagged writepage to mitigate livelock of snapshot
2019-02-12 19:47:11 +01:00
check-integrity.c
btrfs: fix possible NULL-pointer dereference in integrity checks
2020-02-24 08:34:49 +01:00
check-integrity.h
…
compression.c
btrfs: mark compressed range uptodate only if all bio succeed
2021-08-08 08:54:28 +02:00
compression.h
btrfs: correctly validate compression type
2019-09-16 08:22:19 +02:00
ctree.c
btrfs: fix race when picking most recent mod log operation for an old root
2021-05-22 10:59:19 +02:00
ctree.h
btrfs: tree-checker: Verify inode item
2020-11-10 12:35:56 +01:00
dedupe.h
…
delayed-inode.c
btrfs: abort transaction if we fail to update the delayed inode
2021-07-20 16:15:45 +02:00
delayed-inode.h
…
delayed-ref.c
Btrfs: fix race between adding and putting tree mod seq elements and nodes
2020-02-11 04:34:06 -08:00
delayed-ref.h
…
dev-replace.c
btrfs: dev-replace: fail mount if we don't have replace item with target device
2020-11-18 19:18:48 +01:00
dev-replace.h
…
dir-item.c
…
disk-io.c
btrfs: reject log replay if there is unsupported RO compat flag
2022-08-25 11:15:31 +02:00
disk-io.h
btrfs: Check the first key and level for cached extent buffer
2019-05-22 07:37:42 +02:00
export.c
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 17:46:54 +01:00
export.h
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 17:46:54 +01:00
extent_io.c
Btrfs: fix missing error return if writeback for extent buffer never started
2020-11-18 19:18:43 +01:00
extent_io.h
btrfs: fix qgroup reserve overflow the qgroup limit
2022-04-15 14:15:06 +02:00
extent_map.c
Btrfs: fix race between using extent maps and merging them
2020-02-19 19:51:56 +01:00
extent_map.h
…
extent-tree.c
btrfs: unlock newly allocated extent buffer after error
2022-03-16 13:20:28 +01:00
file-item.c
btrfs: fix error handling in btrfs_del_csums
2021-06-10 13:24:07 +02:00
file.c
btrfs: return value from btrfs_mark_extent_written() in case of error
2021-06-16 11:54:59 +02:00
free-space-cache.c
btrfs: clarify error returns values in __load_free_space_cache
2021-03-04 09:39:41 +01:00
free-space-cache.h
…
free-space-tree.c
…
free-space-tree.h
…
inode-item.c
…
inode-map.c
Btrfs: fix inode cache waiters hanging on path allocation failure
2020-01-27 14:51:12 +01:00
inode-map.h
…
inode.c
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
2021-09-22 11:47:48 +02:00
ioctl.c
btrfs: replace strncpy() with strscpy()
2023-01-18 11:30:46 +01:00
Kconfig
btrfs: disable build on platforms having page size 256K
2021-07-20 16:15:45 +02:00
locking.c
…
locking.h
…
lzo.c
…
Makefile
…
math.h
…
ordered-data.c
Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents
2020-02-28 16:38:58 +01:00
ordered-data.h
…
orphan.c
…
print-tree.c
btrfs: require only sector size alignment for parent eb bytenr
2020-09-17 13:45:28 +02:00
print-tree.h
…
props.c
btrfs: correctly validate compression type
2019-09-16 08:22:19 +02:00
props.h
…
qgroup.c
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
2022-12-08 11:18:33 +01:00
qgroup.h
btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
2018-11-13 11:08:56 -08:00
raid56.c
btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
2022-08-25 11:15:48 +02:00
raid56.h
…
rcu-string.h
btrfs: replace strncpy() with strscpy()
2023-01-18 11:30:46 +01:00
reada.c
btrfs: fix use-after-free on readahead extent after failure to create it
2020-11-05 11:08:48 +01:00
ref-verify.c
btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
2020-11-18 19:18:48 +01:00
ref-verify.h
…
relocation.c
btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
2021-05-22 10:59:16 +02:00
root-tree.c
btrfs: do not delete mismatched root refs
2020-01-23 08:21:31 +01:00
scrub.c
btrfs: merge btrfs_find_device and find_device
2020-06-22 09:04:59 +02:00
send.c
btrfs: send: limit number of clones and allocated memory size
2023-03-03 11:40:07 +01:00
send.h
…
struct-funcs.c
…
super.c
btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan
2021-01-19 18:22:36 +01:00
sysfs.c
btrfs: sysfs: use NOFS for device creation
2020-08-26 10:30:59 +02:00
sysfs.h
…
transaction.c
btrfs: clear defrag status of a root if starting transaction fails
2021-07-20 16:15:40 +02:00
transaction.h
Btrfs: fix deadlock between fiemap and transaction commits
2019-08-25 10:47:54 +02:00
tree-checker.c
btrfs: tree-checker: fix the error message for transid error
2020-11-10 12:35:57 +01:00
tree-checker.h
btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
2020-11-10 12:35:56 +01:00
tree-defrag.c
…
tree-log.c
btrfs: fix lost error handling when looking up extended ref on log replay
2022-08-25 11:15:34 +02:00
tree-log.h
Btrfs: sync log after logging new name
2018-08-23 17:37:26 +02:00
ulist.c
…
ulist.h
…
uuid-tree.c
btrfs: handle ENOENT in btrfs_uuid_tree_iterate
2019-12-31 16:34:44 +01:00
volumes.c
btrfs: limit device extents to the device size
2023-02-22 12:47:16 +01:00
volumes.h
btrfs: tree-checker: Verify dev item
2020-11-10 12:35:56 +01:00
xattr.c
btrfs: check if root is readonly while setting security xattr
2022-09-05 10:26:31 +02:00
xattr.h
…
zlib.c
…
zstd.c
…