Arnaud Lecomte 1467a75819 jfs: upper bound check of tree index in dbAllocAG ...

[ Upstream commit c214006856 ]

When computing the tree index in dbAllocAG, we never check if we are
out of bounds realative to the size of the stree.
This could happen in a scenario where the filesystem metadata are
corrupted.

Reported-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=cffd18309153948f3c3e
Tested-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Signed-off-by: Arnaud Lecomte <contact@arnaud-lcm.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-08-28 16:24:23 +02:00

..

acl.c

…

file.c

jfs: Regular file corruption check

2025-08-28 16:24:23 +02:00

inode.c

jfs: truncate good inode pages when hard link is 0

2025-08-28 16:24:23 +02:00

ioctl.c

…

jfs_acl.h

…

jfs_btree.h

…

jfs_debug.c

…

jfs_debug.h

…

jfs_dinode.h

jfs: define xtree root and page independently

2025-05-02 07:44:39 +02:00

jfs_discard.c

jfs: Fix null-ptr-deref in jfs_ioc_trim

2025-06-27 11:05:30 +01:00

jfs_discard.h

…

jfs_dmap.c

jfs: upper bound check of tree index in dbAllocAG

2025-08-28 16:24:23 +02:00

jfs_dmap.h

…

jfs_dtree.c

jfs: fix null ptr deref in dtInsertEntry

2025-07-17 18:30:48 +02:00

jfs_dtree.h

…

jfs_extent.c

jfs: validate max amount of blocks before allocation.

2023-09-19 12:22:43 +02:00

jfs_extent.h

…

jfs_filsys.h

…

jfs_imap.c

jfs: reject on-disk inodes of an unsupported type

2025-08-28 16:24:05 +02:00

jfs_imap.h

…

jfs_incore.h

jfs: define xtree root and page independently

2025-05-02 07:44:39 +02:00

jfs_inode.c

…

jfs_inode.h

…

jfs_lock.h

…

jfs_logmgr.c

…

jfs_logmgr.h

…

jfs_metapage.c

…

jfs_metapage.h

…

jfs_mount.c

jfs: fix uaf in jfs_evict_inode

2024-02-23 08:54:39 +01:00

jfs_superblock.h

…

jfs_txnmgr.c

jfs: define xtree root and page independently

2025-05-02 07:44:39 +02:00

jfs_txnmgr.h

…

jfs_types.h

…

jfs_umount.c

…

jfs_unicode.c

…

jfs_unicode.h

…

jfs_uniupr.c

…

jfs_xattr.h

…

jfs_xtree.c

jfs: define xtree root and page independently

2025-05-02 07:44:39 +02:00

jfs_xtree.h

jfs: define xtree root and page independently

2025-05-02 07:44:39 +02:00

Kconfig

…

Makefile

…

namei.c

FS: JFS: Fix null-ptr-deref Read in txBegin

2023-07-27 08:46:58 +02:00

resize.c

…

super.c

…

symlink.c

…

xattr.c

jfs: fix slab-out-of-bounds read in ea_get()

2025-04-10 14:32:06 +02:00