Mike MarshallandGreg Kroah-Hartman 09d472a18c orangefs: fix a oob in orangefs_debug_write ...

[ Upstream commit f7c8484316 ]

I got a syzbot report: slab-out-of-bounds Read in
orangefs_debug_write... several people suggested fixes,
I tested Al Viro's suggestion and made this patch.

Signed-off-by: Mike Marshall <hubcap@omnibond.com>
Reported-by: syzbot+fc519d7875f2d9186c1f@syzkaller.appspotmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-03-13 12:47:16 +01:00

..

9p

fs/9p: drop inodes immediately on non-.L too

2024-05-17 11:48:05 +02:00

adfs

…

affs

…

afs

afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call

2025-03-13 12:46:44 +01:00

autofs

file: Replace ksys_close with close_fd

2024-06-21 14:52:50 +02:00

befs

…

bfs

…

btrfs

btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling

2025-03-13 12:47:00 +01:00

cachefiles

namei: introduce struct renamedata

2024-06-21 14:52:59 +02:00

ceph

ceph: give up on paths longer than PATH_MAX

2025-02-01 18:22:17 +01:00

cifs

cifs: Fix buffer overflow when parsing NFS reparse points

2024-12-14 19:47:42 +01:00

coda

…

configfs

Revert "configfs: fix a race in configfs_lookup()"

2023-09-21 09:45:15 +02:00

cramfs

…

crypto

…

debugfs

debugfs: fix automount d_fsdata usage

2024-01-25 14:37:36 -08:00

devpts

…

dlm

dlm: fix plock lookup when using multiple lockspaces

2023-09-19 12:20:22 +02:00

ecryptfs

namei: introduce struct renamedata

2024-06-21 14:52:59 +02:00

efivarfs

efivarfs: Fix error on non-existent file

2025-01-09 13:24:53 +01:00

efs

…

erofs

erofs: fix incorrect symlink detection in fast symlink

2025-01-09 13:24:51 +01:00

exfat

exfat: fix the infinite loop in exfat_readdir()

2025-02-01 18:22:18 +01:00

exportfs

exportfs: use pr_debug for unreachable debug statements

2024-06-21 14:54:05 +02:00

ext2

ext2: Verify bitmap and itable block numbers before using them

2024-08-19 05:40:56 +02:00

ext4

ext4: fix FS_IOC_GETFSMAP handling

2024-12-14 19:48:08 +01:00

f2fs

f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.

2024-12-14 19:48:31 +01:00

fat

fat: fix uninitialized variable

2024-10-22 15:39:24 +02:00

freevxfs

…

fscache

…

fuse

fuse: use unsigned type for getxattr/listxattr size truncation

2024-09-12 11:06:43 +02:00

gfs2

gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag

2025-02-01 18:22:32 +01:00

hfs

hfs: Sanity check the root record

2025-02-01 18:22:28 +01:00

hfsplus

hfsplus: don't query the device logical block size multiple times

2024-12-14 19:47:44 +01:00

hostfs

…

hpfs

…

hugetlbfs

mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE

2024-03-15 10:48:22 -04:00

iomap

iomap: update ki_pos a little later in iomap_dio_complete

2024-11-08 16:21:58 +01:00

isofs

isofs: handle CDs with bad root inode but good Joliet root directory

2024-04-13 12:59:46 +02:00

jbd2

jbd2: flush filesystem device before updating tail sequence

2025-02-01 18:22:17 +01:00

jffs2

jffs2: Fix rtime decompressor

2024-12-14 19:48:34 +01:00

jfs

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

2024-12-14 19:48:28 +01:00

kernfs

fs/kernfs/dir: obey S_ISGID

2024-02-23 08:42:14 +01:00

lockd

nfsd: stop setting ->pg_stats for unused stats

2024-09-12 11:06:45 +02:00

minix

…

nfs

pnfs/flexfiles: retry getting layout segment for reads

2025-03-13 12:47:12 +01:00

nfs_common

NFSD: Add an xdr_stream-based encoder for NFSv2/3 ACLs

2024-06-21 14:53:03 +02:00

nfsd

NFSD: fix hang in nfsd4_shutdown_callback

2025-03-13 12:47:14 +01:00

nilfs2

nilfs2: fix possible int overflows in nilfs_fiemap()

2025-03-13 12:47:12 +01:00

nls

fs/nls: make load_nls() take a const parameter

2023-09-19 12:20:04 +02:00

notify

fsnotify: fix sending inotify event with unexpected filename

2024-12-14 19:48:08 +01:00

ntfs

…

ocfs2

ocfs2: check dir i_size in ocfs2_find_entry

2025-03-13 12:47:13 +01:00

omfs

…

openpromfs

openpromfs: finish conversion to the new mount API

2024-06-16 13:32:01 +02:00

orangefs

orangefs: fix a oob in orangefs_debug_write

2025-03-13 12:47:16 +01:00

overlayfs

ovl: Filter invalid inodes with missing lookup function

2024-12-14 19:47:37 +01:00

proc

fs/proc: fix softlockup in __read_vmcore (part 2)

2025-02-01 18:22:29 +01:00

pstore

pstore/zone: Add a null pointer check to the psz_kmsg_read

2024-04-13 12:59:41 +02:00

qnx4

…

qnx6

…

quota

quota: flush quota_release_work upon quota writeback

2024-12-14 19:48:16 +01:00

ramfs

shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs

2023-07-27 08:44:13 +02:00

reiserfs

reiserfs: Check the return value from __getblk()

2023-09-19 12:20:06 +02:00

romfs

…

squashfs

Squashfs: sanity check symbolic link size

2024-09-12 11:06:49 +02:00

sysfs

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

2024-05-02 16:23:39 +02:00

sysv

sysv: don't call sb_bread() with pointers_lock held

2024-04-13 12:59:45 +02:00

tracefs

tracefs: Add missing lockdown check to tracefs_create_dir()

2023-09-23 11:01:10 +02:00

ubifs

ubifs: skip dumping tnc tree when zroot is null

2025-03-13 12:46:57 +01:00

udf

udf: Avoid excessive partition lengths

2024-09-12 11:06:46 +02:00

ufs

…

unicode

Revert "unicode: Don't special case ignorable code points"

2024-12-14 19:48:33 +01:00

vboxsf

vboxsf: Avoid an spurious warning if load_nls_xxx() fails

2024-04-13 12:59:25 +02:00

verity

fs: add file and path permissions helpers

2024-06-21 14:52:58 +02:00

xfs

xfs: fix scrub tracepoints when inode-rooted btrees are involved

2024-12-19 18:06:09 +01:00

zonefs

zonefs: Improve error handling

2024-03-01 13:16:43 +01:00

aio.c

fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion

2024-04-13 12:58:53 +02:00

anon_inodes.c

…

attr.c

attr: block mode changes of symlinks

2023-09-23 11:01:09 +02:00

bad_inode.c

…

binfmt_aout.c

…

binfmt_elf_fdpic.c

binfmt_misc: pass binfmt_misc flags to the interpreter

2024-09-04 13:17:42 +02:00

binfmt_elf.c

binfmt_misc: pass binfmt_misc flags to the interpreter

2024-09-04 13:17:42 +02:00

binfmt_em86.c

…

binfmt_flat.c

binfmt_flat: Fix integer overflow bug on 32 bit systems

2025-03-13 12:47:06 +01:00

binfmt_misc.c

binfmt_misc: pass binfmt_misc flags to the interpreter

2024-09-04 13:17:42 +02:00

binfmt_script.c

…

block_dev.c

block: Don't invalidate pagecache for invalid falloc modes

2024-01-15 18:48:03 +01:00

buffer.c

…

char_dev.c

…

compat_binfmt_elf.c

…

coredump.c

exec: Simplify unshare_files

2024-06-21 14:52:47 +02:00

d_path.c

…

dax.c

…

dcache.c

fs: better handle deep ancestor chains in is_subdir()

2024-07-27 10:40:21 +02:00

dcookies.c

…

direct-io.c

…

drop_caches.c

…

eventfd.c

eventfd: prevent underflow for eventfd semaphores

2023-09-19 12:20:06 +02:00

eventpoll.c

epoll: Add synchronous wakeup support for ep_poll_callback

2025-01-09 13:24:55 +01:00

exec.c

exec: don't WARN for racy path_noexec check

2024-11-08 16:21:58 +01:00

fcntl.c

fs: Fix file_set_fowner LSM hook inconsistencies

2024-10-17 15:08:03 +02:00

fhandle.c

do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak

2024-03-26 18:21:47 -04:00

file_table.c

…

file.c

fs: fix missing declaration of init_files

2025-02-01 18:22:28 +01:00

filesystems.c

…

fs_context.c

fs: avoid empty option when generating legacy mount string

2023-07-27 08:44:13 +02:00

fs_parser.c

…

fs_pin.c

…

fs_struct.c

…

fs_types.c

…

fs-writeback.c

…

fsopen.c

…

init.c

fs: add file and path permissions helpers

2024-06-21 14:52:58 +02:00

inode.c

vfs: fix race between evice_inodes() and find_inode()&iput()

2024-10-17 15:08:03 +02:00

internal.h

fs: Establish locking order for unrelated directories

2023-07-27 08:44:13 +02:00

ioctl.c

lsm: new security_file_ioctl_compat() hook

2024-02-23 08:41:53 +01:00

Kconfig

NFSD: Remove CONFIG_NFSD_V3

2024-06-21 14:53:37 +02:00

Kconfig.binfmt

…

kernel_read_file.c

…

libfs.c

…

locks.c

filelock: Fix fcntl/close race recovery compat path

2024-07-27 10:40:24 +02:00

Makefile

…

mbcache.c

…

mount.h

…

mpage.c

…

namei.c

namei: introduce struct renamedata

2024-06-21 14:52:59 +02:00

namespace.c

mount: handle OOM on mnt_warn_timestamp_expiry

2024-10-17 15:07:39 +02:00

no-block.c

…

nsfs.c

…

open.c

openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)

2024-11-08 16:22:00 +01:00

pipe.c

pipe: wakeup wr_wait after setting max_usage

2024-02-23 08:42:00 +01:00

pnode.c

…

pnode.h

…

posix_acl.c

…

proc_namespace.c

…

read_write.c

…

readdir.c

…

remap_range.c

…

select.c

select: Fix unbalanced user_access_end()

2025-03-13 12:46:44 +01:00

seq_file.c

…

signalfd.c

…

splice.c

splice: don't generate zero-len segement bvecs

2024-11-17 14:59:37 +01:00

stack.c

…

stat.c

…

statfs.c

…

super.c

fs: explicitly unregister per-superblock BDIs

2024-10-17 15:07:38 +02:00

sync.c

…

timerfd.c

…

userfaultfd.c

…

utimes.c

…

xattr.c

…