iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs/jfs
History
Alexei Filippov 8f994b830d jfs: validate max amount of blocks before allocation. 
[ Upstream commit 0225e10972fa809728b8d4c1bd2772b3ec3fdb57 ]

The lack of checking bmp->db_max_freebud in extBalloc() can lead to
shift out of bounds, so this patch prevents undefined behavior, because
bmp->db_max_freebud == -1 only if there is no free space.

Signed-off-by: Aleksei Filippov <halip0503@gmail.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Reported-and-tested-by: syzbot+5f088f29593e6b4c8db8@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?id=01abadbd6ae6a08b1f1987aa61554c6b3ac19ff2
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-09-19 12:22:43 +02:00
..
acl.c
vfs: add rcu argument to ->get_acl() callback
2021-08-18 22:08:24 +02:00
file.c
jfs: convert to fileattr
2021-04-12 15:04:29 +02:00
inode.c
jfs: prevent NULL deref in diFree
2022-04-13 20:59:13 +02:00
ioctl.c
jfs: convert to fileattr
2021-04-12 15:04:29 +02:00
jfs_acl.h
vfs: add rcu argument to ->get_acl() callback
2021-08-18 22:08:24 +02:00
jfs_btree.h
…
jfs_debug.c
…
jfs_debug.h
…
jfs_dinode.h
jfs: Avoid field-overflowing memcpy()
2021-06-23 09:21:52 -05:00
jfs_discard.c
…
jfs_discard.h
…
jfs_dmap.c
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
2023-07-27 08:46:58 +02:00
jfs_dmap.h
jfs: Fix array index bounds check in dbAdjTree
2020-11-13 16:03:07 -06:00
jfs_dtree.c
jfs: Replace zero-length array with flexible-array member
2020-03-09 15:18:51 -05:00
jfs_dtree.h
…
jfs_extent.c
jfs: validate max amount of blocks before allocation.
2023-09-19 12:22:43 +02:00
jfs_extent.h
jfs: delete duplicated words + other fixes
2020-11-13 13:36:00 -06:00
jfs_filsys.h
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
2023-07-23 13:47:49 +02:00
jfs_imap.c
jfs: Avoid field-overflowing memcpy()
2021-06-23 09:21:52 -05:00
jfs_imap.h
…
jfs_incore.h
jfs: Avoid field-overflowing memcpy()
2021-06-23 09:21:52 -05:00
jfs_inode.c
inode: make init and permission helpers idmapped mount aware
2021-01-24 14:27:16 +01:00
jfs_inode.h
jfs: convert to fileattr
2021-04-12 15:04:29 +02:00
jfs_lock.h
…
jfs_logmgr.c
fs/jfs: Fix missing error code in lmLogInit()
2021-06-01 10:29:12 -05:00
jfs_logmgr.h
jfs: delete duplicated words + other fixes
2020-11-13 13:36:00 -06:00
jfs_metapage.c
fs: Introduce i_blocks_per_page
2020-09-21 08:59:26 -07:00
jfs_metapage.h
…
jfs_mount.c
JFS: fix memleak in jfs_mount
2021-11-18 19:16:48 +01:00
jfs_superblock.h
…
jfs_txnmgr.c
FS: JFS: Check for read-only mounted filesystem in txBegin
2023-07-27 08:46:58 +02:00
jfs_txnmgr.h
…
jfs_types.h
…
jfs_umount.c
…
jfs_unicode.c
…
jfs_unicode.h
…
jfs_uniupr.c
…
jfs_xattr.h
jfs: Replace zero-length array with flexible-array member
2020-03-09 15:18:51 -05:00
jfs_xtree.c
jfs: delete duplicated words + other fixes
2020-11-13 13:36:00 -06:00
jfs_xtree.h
…
Kconfig
…
Makefile
…
namei.c
FS: JFS: Fix null-ptr-deref Read in txBegin
2023-07-27 08:46:58 +02:00
resize.c
block: move struct block_device to blk_types.h
2020-06-24 09:16:02 -06:00
super.c
jfs: Avoid field-overflowing memcpy()
2021-06-23 09:21:52 -05:00
symlink.c
…
xattr.c
acl: handle idmapped mounts
2021-01-24 14:27:17 +01:00