Zheng Yu 3406bd02de jfs: fix metapage reference count leak in dbAllocCtl ...

[ Upstream commit 856db37592 ]

In dbAllocCtl(), read_metapage() increases the reference count of the
metapage. However, when dp->tree.budmin < 0, the function returns -EIO
without calling release_metapage() to decrease the reference count,
leading to a memory leak.

Add release_metapage(mp) before the error return to properly manage
the metapage reference count and prevent the leak.

Fixes: a5f5e4698f ("jfs: fix shift-out-of-bounds in dbSplit")

Signed-off-by: Zheng Yu <zheng.yu@northwestern.edu>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-08-15 12:13:57 +02:00

..

acl.c

…

file.c

…

inode.c

…

ioctl.c

…

jfs_acl.h

…

jfs_btree.h

…

jfs_debug.c

…

jfs_debug.h

…

jfs_dinode.h

…

jfs_discard.c

…

jfs_discard.h

…

jfs_dmap.c

jfs: fix metapage reference count leak in dbAllocCtl

2025-08-15 12:13:57 +02:00

jfs_dmap.h

…

jfs_dtree.c

jfs: add index corruption check to DT_GETPAGE()

2025-04-10 14:39:40 +02:00

jfs_dtree.h

…

jfs_extent.c

…

jfs_extent.h

…

jfs_filsys.h

…

jfs_imap.c

jfs: reject on-disk inodes of an unsupported type

2025-08-01 09:48:44 +01:00

jfs_imap.h

…

jfs_incore.h

…

jfs_inode.c

…

jfs_inode.h

…

jfs_lock.h

…

jfs_logmgr.c

…

jfs_logmgr.h

…

jfs_metapage.c

…

jfs_metapage.h

…

jfs_mount.c

…

jfs_superblock.h

…

jfs_txnmgr.c

…

jfs_txnmgr.h

…

jfs_types.h

…

jfs_umount.c

…

jfs_unicode.c

…

jfs_unicode.h

…

jfs_xattr.h

…

jfs_xtree.c

…

jfs_xtree.h

…

Kconfig

…

Makefile

…

namei.c

…

resize.c

…

super.c

…

symlink.c

…

xattr.c

jfs: fix slab-out-of-bounds read in ea_get()

2025-04-10 14:39:40 +02:00