Zichen Xie edfae9d997 dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow ...

commit 5a4510c762 upstream.

This was found by a static analyzer.
There may be a potential integer overflow issue in
unstripe_ctr(). uc->unstripe_offset and uc->unstripe_width are
defined as "sector_t"(uint64_t), while uc->unstripe,
uc->chunk_size and uc->stripes are all defined as "uint32_t".
The result of the calculation will be limited to "uint32_t"
without correct casting.
So, we recommend adding an extra cast to prevent potential
integer overflow.

Fixes: 18a5bf2705 ("dm: add unstriped target")
Signed-off-by: Zichen Xie <zichenxie0106@gmail.com>
Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-11-14 13:19:37 +01:00

..

bcache

bcache: fix variable length array abuse in btree_iter

2024-06-16 13:47:32 +02:00

persistent-data

dm persistent data: fix memory allocation failure

2024-08-29 17:33:13 +02:00

dm-audit.c

…

dm-audit.h

…

dm-bio-prison-v1.c

…

dm-bio-prison-v1.h

…

dm-bio-prison-v2.c

…

dm-bio-prison-v2.h

…

dm-bio-record.h

…

dm-bufio.c

dm io: Support IO priority

2024-03-26 18:20:13 -04:00

dm-builtin.c

…

dm-cache-background-tracker.c

…

dm-cache-background-tracker.h

…

dm-cache-block-types.h

…

dm-cache-metadata.c

…

dm-cache-metadata.h

…

dm-cache-policy-internal.h

…

dm-cache-policy-smq.c

…

dm-cache-policy.c

…

dm-cache-policy.h

…

dm-cache-target.c

dm cache: fix potential out-of-bounds access on the first resume

2024-11-14 13:19:37 +01:00

dm-clone-metadata.c

bitmap: introduce generic optimized bitmap_size()

2024-08-29 17:33:14 +02:00

dm-clone-metadata.h

…

dm-clone-target.c

…

dm-core.h

…

dm-crypt.c

…

dm-delay.c

…

dm-dust.c

…

dm-ebs-target.c

…

dm-era-target.c

…

dm-exception-store.c

…

dm-exception-store.h

…

dm-flakey.c

…

dm-ima.c

…

dm-ima.h

…

dm-init.c

dm init: Handle minors larger than 255

2024-09-12 11:11:35 +02:00

dm-integrity.c

dm-integrity: fix a race condition when accessing recalc_sector

2024-09-18 19:24:07 +02:00

dm-io-rewind.c

…

dm-io-tracker.h

…

dm-io.c

dm io: Support IO priority

2024-03-26 18:20:13 -04:00

dm-ioctl.c

dm resume: don't return EINVAL when signalled

2024-08-29 17:33:13 +02:00

dm-kcopyd.c

dm io: Support IO priority

2024-03-26 18:20:13 -04:00

dm-linear.c

…

dm-log-userspace-base.c

…

dm-log-userspace-transfer.c

…

dm-log-userspace-transfer.h

…

dm-log-writes.c

…

dm-log.c

dm io: Support IO priority

2024-03-26 18:20:13 -04:00

dm-mpath.c

…

dm-mpath.h

…

dm-path-selector.c

…

dm-path-selector.h

…

dm-ps-historical-service-time.c

…

dm-ps-io-affinity.c

…

dm-ps-queue-length.c

…

dm-ps-round-robin.c

…

dm-ps-service-time.c

…

dm-raid1.c

dm io: Support IO priority

2024-03-26 18:20:13 -04:00

dm-raid.c

dm-raid: fix lockdep waring in "pers->hot_add_disk"

2024-04-03 15:28:26 +02:00

dm-region-hash.c

…

dm-rq.c

Revert "dm: requeue IO if mapping table not yet available"

2024-10-04 16:29:40 +02:00

dm-rq.h

…

dm-snap-persistent.c

dm io: Support IO priority

2024-03-26 18:20:13 -04:00

dm-snap-transient.c

…

dm-snap.c

dm snapshot: fix lockup in dm_exception_table_exit

2024-04-03 15:28:37 +02:00

dm-stats.c

…

dm-stats.h

…

dm-stripe.c

…

dm-switch.c

…

dm-sysfs.c

…

dm-table.c

…

dm-target.c

…

dm-thin-metadata.c

…

dm-thin-metadata.h

…

dm-thin.c

…

dm-uevent.c

…

dm-uevent.h

…

dm-unstripe.c

dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow

2024-11-14 13:19:37 +01:00

dm-verity-fec.c

…

dm-verity-fec.h

…

dm-verity-loadpin.c

…

dm-verity-target.c

Revert: "dm-verity: restart or panic on an I/O error"

2024-10-04 16:30:05 +02:00

dm-verity-verify-sig.c

…

dm-verity-verify-sig.h

…

dm-verity.h

…

dm-writecache.c

dm io: Support IO priority

2024-03-26 18:20:13 -04:00

dm-zero.c

…

dm-zone.c

…

dm-zoned-metadata.c

…

dm-zoned-reclaim.c

…

dm-zoned-target.c

…

dm-zoned.h

…

dm.c

Revert "dm: requeue IO if mapping table not yet available"

2024-10-04 16:29:40 +02:00

dm.h

…

Kconfig

…

Makefile

…

md-autodetect.c

…

md-bitmap.c

md/md-bitmap: fix writing non bitmap pages

2024-08-03 08:54:18 +02:00

md-bitmap.h

…

md-cluster.c

…

md-cluster.h

…

md-faulty.c

…

md-linear.c

…

md-linear.h

…

md-multipath.c

…

md-multipath.h

…

md.c

md: clean up invalid BUG_ON in md_ioctl

2024-08-29 17:33:35 +02:00

md.h

…

raid0.c

…

raid0.h

…

raid1-10.c

…

raid1.c

raid1: fix use-after-free for original bio in raid1_write_request()

2024-04-17 11:19:25 +02:00

raid1.h

…

raid5-cache.c

md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log'

2024-08-29 17:33:27 +02:00

raid5-log.h

…

raid5-ppl.c

…

raid5.c

md/raid5: avoid BUG_ON() while continue reshape after reassembling

2024-08-14 13:58:41 +02:00

raid5.h

…

raid10.c

…

raid10.h

…