mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-11-11 12:28:41 +08:00
fs/ntfs3: Potential NULL dereference in hdr_find_split()
The "e" pointer is dereferenced before it has been checked for NULL.
Move the dereference after the NULL check to prevent an Oops.
Fixes: 82cae269cf
("fs/ntfs3: Add initialization of super block")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Kari Argillander <kari.argillander@gmail.com>
Signed-off-by: Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
This commit is contained in:
parent
04810f000a
commit
8c83a4851d
@ -557,11 +557,12 @@ static const struct NTFS_DE *hdr_find_split(const struct INDEX_HDR *hdr)
|
|||||||
size_t o;
|
size_t o;
|
||||||
const struct NTFS_DE *e = hdr_first_de(hdr);
|
const struct NTFS_DE *e = hdr_first_de(hdr);
|
||||||
u32 used_2 = le32_to_cpu(hdr->used) >> 1;
|
u32 used_2 = le32_to_cpu(hdr->used) >> 1;
|
||||||
u16 esize = le16_to_cpu(e->size);
|
u16 esize;
|
||||||
|
|
||||||
if (!e || de_is_last(e))
|
if (!e || de_is_last(e))
|
||||||
return NULL;
|
return NULL;
|
||||||
|
|
||||||
|
esize = le16_to_cpu(e->size);
|
||||||
for (o = le32_to_cpu(hdr->de_off) + esize; o < used_2; o += esize) {
|
for (o = le32_to_cpu(hdr->de_off) + esize; o < used_2; o += esize) {
|
||||||
const struct NTFS_DE *p = e;
|
const struct NTFS_DE *p = e;
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user