linux/fs/jfs
Manas Ghandat 8393c80cce jfs: fix array-index-out-of-bounds in dbAdjTree
[ Upstream commit 74ecdda682 ]

Currently there is a bound check missing in the dbAdjTree while
accessing the dmt_stree. To add the required check added the bool is_ctl
which is required to determine the size as suggest in the following
commit.
https://lore.kernel.org/linux-kernel-mentees/f9475918-2186-49b8-b801-6f0f9e75f4fa@oracle.com/

Reported-by: syzbot+39ba34a099ac2e9bd3cb@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=39ba34a099ac2e9bd3cb
Signed-off-by: Manas Ghandat <ghandatmanas@gmail.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-02-23 08:54:38 +01:00
..
acl.c vfs: add rcu argument to ->get_acl() callback 2021-08-18 22:08:24 +02:00
file.c jfs: convert to fileattr 2021-04-12 15:04:29 +02:00
inode.c jfs: prevent NULL deref in diFree 2022-04-13 20:59:13 +02:00
ioctl.c jfs: convert to fileattr 2021-04-12 15:04:29 +02:00
jfs_acl.h vfs: add rcu argument to ->get_acl() callback 2021-08-18 22:08:24 +02:00
jfs_btree.h
jfs_debug.c
jfs_debug.h
jfs_dinode.h jfs: Avoid field-overflowing memcpy() 2021-06-23 09:21:52 -05:00
jfs_discard.c
jfs_discard.h
jfs_dmap.c jfs: fix array-index-out-of-bounds in dbAdjTree 2024-02-23 08:54:38 +01:00
jfs_dmap.h jfs: Fix array index bounds check in dbAdjTree 2020-11-13 16:03:07 -06:00
jfs_dtree.c jfs: fix slab-out-of-bounds Read in dtSearch 2024-02-23 08:54:38 +01:00
jfs_dtree.h
jfs_extent.c jfs: validate max amount of blocks before allocation. 2023-09-19 12:22:43 +02:00
jfs_extent.h
jfs_filsys.h jfs: jfs_dmap: Validate db_l2nbperpage while mounting 2023-07-23 13:47:49 +02:00
jfs_imap.c jfs: fix array-index-out-of-bounds in diAlloc 2023-11-28 16:56:18 +00:00
jfs_imap.h
jfs_incore.h jfs: Avoid field-overflowing memcpy() 2021-06-23 09:21:52 -05:00
jfs_inode.c inode: make init and permission helpers idmapped mount aware 2021-01-24 14:27:16 +01:00
jfs_inode.h jfs: convert to fileattr 2021-04-12 15:04:29 +02:00
jfs_lock.h
jfs_logmgr.c fs/jfs: Fix missing error code in lmLogInit() 2021-06-01 10:29:12 -05:00
jfs_logmgr.h
jfs_metapage.c
jfs_metapage.h
jfs_mount.c JFS: fix memleak in jfs_mount 2021-11-18 19:16:48 +01:00
jfs_superblock.h
jfs_txnmgr.c FS: JFS: Check for read-only mounted filesystem in txBegin 2023-07-27 08:46:58 +02:00
jfs_txnmgr.h
jfs_types.h
jfs_umount.c
jfs_unicode.c
jfs_unicode.h
jfs_uniupr.c
jfs_xattr.h
jfs_xtree.c
jfs_xtree.h
Kconfig
Makefile
namei.c FS: JFS: Fix null-ptr-deref Read in txBegin 2023-07-27 08:46:58 +02:00
resize.c
super.c jfs: Avoid field-overflowing memcpy() 2021-06-23 09:21:52 -05:00
symlink.c
xattr.c acl: handle idmapped mounts 2021-01-24 14:27:17 +01:00