Theodore Ts'oandGreg Kroah-Hartman 01829af765 ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() ...

[ Upstream commit 8ecb790ea8 ]

Unlike other strings in the ext4 superblock, we rely on tune2fs to
make sure s_mount_opts is NUL terminated.  Harden
parse_apply_sb_mount_options() by treating s_mount_opts as a potential
__nonstring.

Cc: stable@vger.kernel.org
Fixes: 8b67f04ab9 ("ext4: Add mount options in superblock")
Reviewed-by: Jan Kara <jack@suse.cz>
Reviewed-by: Darrick J. Wong <djwong@kernel.org>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Message-ID: <20250916-tune2fs-v2-1-d594dc7486f0@mit.edu>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
[ added sizeof() third argument to strscpy_pad() ]
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-10-23 16:16:42 +02:00

..

.kunitconfig

…

acl.c

…

acl.h

…

balloc.c

ext4: reorder capability check last

2025-06-04 14:41:57 +02:00

bitmap.c

…

block_validity.c

ext4: make block validity check resistent to sb bh corruption

2025-05-02 07:51:00 +02:00

crypto.c

…

dir.c

ext4: fix OOB read when checking dotdot dir

2025-04-10 14:37:43 +02:00

ext4_extents.h

…

ext4_jbd2.c

ext4: wait for ongoing I/O to complete before freeing blocks

2025-10-23 16:16:24 +02:00

ext4_jbd2.h

…

ext4.h

ext4: fix checks for orphan inodes

2025-10-15 11:58:08 +02:00

extents_status.c

…

extents_status.h

…

extents.c

ext4: factor out ext4_get_maxbytes()

2025-06-27 11:08:47 +01:00

fast_commit.c

ext4: use handle to mark fc as ineligible in __track_dentry_update()

2024-10-10 11:57:49 +02:00

fast_commit.h

…

file.c

ext4: fix checks for orphan inodes

2025-10-15 11:58:08 +02:00

fsmap.c

ext4: correctly handle queries for metadata mappings

2025-10-19 16:30:56 +02:00

fsmap.h

…

fsync.c

…

hash.c

…

ialloc.c

ext4: convert to new timestamp accessors

2025-01-09 13:31:40 +01:00

indirect.c

ext4: fix hole length calculation overflow in non-extent inodes

2025-08-28 16:28:34 +02:00

inline.c

ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr

2025-08-28 16:28:25 +02:00

inode-test.c

…

inode.c

ext4: detect invalid INLINE_DATA + EXTENTS flag combination

2025-10-23 16:16:24 +02:00

ioctl.c

ext4: convert to new timestamp accessors

2025-01-09 13:31:40 +01:00

Kconfig

…

Makefile

…

mballoc.c

ext4: fix largest free orders lists corruption on mb_optimize_scan switch

2025-08-28 16:28:30 +02:00

mballoc.h

ext4: fix FS_IOC_GETFSMAP handling

2024-12-09 10:32:42 +01:00

migrate.c

ext4: fix i_data_sem unlock order in ext4_ind_migrate()

2024-10-10 11:57:39 +02:00

mmp.c

ext4: fix race in buffer_head read fault injection

2024-12-09 10:31:46 +01:00

move_extent.c

ext4: fix an off-by-one issue during moving extents

2025-10-19 16:30:56 +02:00

namei.c

ext4: fix off-by-one error in do_split

2025-04-25 10:45:27 +02:00

orphan.c

ext4: free orphan info with kvfree

2025-10-19 16:30:57 +02:00

page-io.c

ext4: do not convert the unwritten extents if data writeback fails

2025-06-04 14:41:59 +02:00

readpage.c

ext4: remove calls to to set/clear the folio error flag

2024-12-09 10:31:45 +01:00

resize.c

ext4: fix race in buffer_head read fault injection

2024-12-09 10:31:46 +01:00

super.c

ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

2025-10-23 16:16:42 +02:00

symlink.c

…

sysfs.c

…

truncate.h

…

verity.c

…

xattr_hurd.c

…

xattr_security.c

…

xattr_trusted.c

…

xattr_user.c

…

xattr.c

ext4: validate ea_ino and size in check_xattrs

2025-10-19 16:30:56 +02:00

xattr.h

…