linux-stable/fs/jfs
Arnaud Lecomte 49ea46d902 jfs: upper bound check of tree index in dbAllocAG
[ Upstream commit c214006856 ]

When computing the tree index in dbAllocAG, we never check if we are
out of bounds realative to the size of the stree.
This could happen in a scenario where the filesystem metadata are
corrupted.

Reported-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=cffd18309153948f3c3e
Tested-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Signed-off-by: Arnaud Lecomte <contact@arnaud-lcm.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-08-28 16:26:00 +02:00
..
acl.c
file.c jfs: Regular file corruption check 2025-08-28 16:26:00 +02:00
inode.c jfs: truncate good inode pages when hard link is 0 2025-08-28 16:25:59 +02:00
ioctl.c
jfs_acl.h
jfs_btree.h
jfs_debug.c
jfs_debug.h
jfs_dinode.h jfs: define xtree root and page independently 2025-05-02 07:47:08 +02:00
jfs_discard.c
jfs_discard.h
jfs_dmap.c jfs: upper bound check of tree index in dbAllocAG 2025-08-28 16:26:00 +02:00
jfs_dmap.h
jfs_dtree.c jfs: add index corruption check to DT_GETPAGE() 2025-04-10 14:33:43 +02:00
jfs_dtree.h
jfs_extent.c
jfs_extent.h
jfs_filsys.h
jfs_imap.c jfs: reject on-disk inodes of an unsupported type 2025-08-15 12:04:50 +02:00
jfs_imap.h
jfs_incore.h jfs: define xtree root and page independently 2025-05-02 07:47:08 +02:00
jfs_inode.c
jfs_inode.h
jfs_lock.h
jfs_logmgr.c
jfs_logmgr.h
jfs_metapage.c
jfs_metapage.h
jfs_mount.c
jfs_superblock.h
jfs_txnmgr.c jfs: define xtree root and page independently 2025-05-02 07:47:08 +02:00
jfs_txnmgr.h
jfs_types.h
jfs_umount.c
jfs_unicode.c
jfs_unicode.h
jfs_uniupr.c
jfs_xattr.h
jfs_xtree.c jfs: define xtree root and page independently 2025-05-02 07:47:08 +02:00
jfs_xtree.h jfs: define xtree root and page independently 2025-05-02 07:47:08 +02:00
Kconfig
Makefile
namei.c
resize.c
super.c
symlink.c
xattr.c jfs: fix slab-out-of-bounds read in ea_get() 2025-04-10 14:33:43 +02:00