tplink_xx230v/kernel
2
0
Fork 0
Code Issues 3 Pull Requests 1 Projects 1 Activity
Files
airoha_en7523
kernel/fs/jfs
History
Arnaud Lecomte c8ca21a283 jfs: upper bound check of tree index in dbAllocAG 
[ Upstream commit c214006856ff52a8ff17ed8da52d50601d54f9ce ]

When computing the tree index in dbAllocAG, we never check if we are
out of bounds realative to the size of the stree.
This could happen in a scenario where the filesystem metadata are
corrupted.

Reported-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=cffd18309153948f3c3e
Tested-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Signed-off-by: Arnaud Lecomte <contact@arnaud-lcm.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-08-20 18:30:42 +02:00
..
acl.c
jfs: convert to ctime accessor functions
2023-07-24 10:30:01 +02:00
file.c
jfs: Regular file corruption check
2025-08-20 18:30:42 +02:00
inode.c
jfs: truncate good inode pages when hard link is 0
2025-08-20 18:30:42 +02:00
ioctl.c
jfs: convert to ctime accessor functions
2023-07-24 10:30:01 +02:00
jfs_acl.h
…
jfs_btree.h
…
jfs_debug.c
…
jfs_debug.h
…
jfs_dinode.h
jfs: define xtree root and page independently
2023-10-13 10:39:25 -05:00
jfs_discard.c
jfs: Fix uaf in dbFreeBits
2024-08-27 11:32:43 -05:00
jfs_discard.h
…
jfs_dmap.c
jfs: upper bound check of tree index in dbAllocAG
2025-08-20 18:30:42 +02:00
jfs_dmap.h
…
jfs_dtree.c
jfs: add index corruption check to DT_GETPAGE()
2025-04-10 14:39:40 +02:00
jfs_dtree.h
…
jfs_extent.c
jfs: validate max amount of blocks before allocation.
2023-08-29 12:25:47 -05:00
jfs_extent.h
…
jfs_filsys.h
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
2023-06-20 12:37:50 -05:00
jfs_imap.c
jfs: reject on-disk inodes of an unsupported type
2025-08-01 09:48:44 +01:00
jfs_imap.h
…
jfs_incore.h
quota: Properly annotate i_dquot arrays with __rcu
2024-02-08 12:04:59 +01:00
jfs_inode.c
jfs: convert to new timestamp accessors
2023-10-18 14:08:23 +02:00
jfs_inode.h
…
jfs_lock.h
…
jfs_logmgr.c
jfs: Change metapage->page to metapage->folio
2024-05-27 20:37:06 -05:00
jfs_logmgr.h
jfs: port block device access to file
2024-02-25 12:05:26 +01:00
jfs_metapage.c
jfs: Remove use of folio error flag
2024-05-27 20:37:06 -05:00
jfs_metapage.h
jfs: Change metapage->page to metapage->folio
2024-05-27 20:37:06 -05:00
jfs_mount.c
jfs: port block device access to file
2024-02-25 12:05:26 +01:00
jfs_superblock.h
…
jfs_txnmgr.c
jfs: Add missing set_freezable() for freezable kthread
2024-01-02 11:06:52 -06:00
jfs_txnmgr.h
…
jfs_types.h
…
jfs_umount.c
…
jfs_unicode.c
…
jfs_unicode.h
fs/jfs: Use common ucs2 upper case table
2023-08-30 08:55:52 -05:00
jfs_xattr.h
jfs: move jfs_xattr_handlers to .rodata
2023-10-09 16:24:19 +02:00
jfs_xtree.c
jfs: define xtree root and page independently
2023-10-13 10:39:25 -05:00
jfs_xtree.h
jfs: define xtree root and page independently
2023-10-13 10:39:25 -05:00
Kconfig
Merge tag '6.6-rc-smb3-client-fixes-part1' of git://git.samba.org/sfrench/cifs-2.6
2023-08-30 21:01:40 -07:00
Makefile
fs/jfs: Use common ucs2 upper case table
2023-08-30 08:55:52 -05:00
namei.c
jfs: convert to new timestamp accessors
2023-10-18 14:08:23 +02:00
resize.c
…
super.c
Merge tag 'fs_for_v6.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
2024-03-13 14:30:58 -07:00
symlink.c
…
xattr.c
jfs: fix slab-out-of-bounds read in ea_get()
2025-04-10 14:39:40 +02:00