linux-yocto/fs/jfs
Arnaud Lecomte 30e19a884c jfs: upper bound check of tree index in dbAllocAG
[ Upstream commit c214006856 ]

When computing the tree index in dbAllocAG, we never check if we are
out of bounds realative to the size of the stree.
This could happen in a scenario where the filesystem metadata are
corrupted.

Reported-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=cffd18309153948f3c3e
Tested-by: syzbot+cffd18309153948f3c3e@syzkaller.appspotmail.com
Signed-off-by: Arnaud Lecomte <contact@arnaud-lcm.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-08-20 18:41:23 +02:00
..
acl.c
file.c jfs: Regular file corruption check 2025-08-20 18:41:23 +02:00
inode.c jfs: truncate good inode pages when hard link is 0 2025-08-20 18:41:23 +02:00
ioctl.c
jfs_acl.h
jfs_btree.h
jfs_debug.c
jfs_debug.h
jfs_dinode.h
jfs_discard.c jfs: Fix null-ptr-deref in jfs_ioc_trim 2025-04-03 09:11:42 -05:00
jfs_discard.h
jfs_dmap.c jfs: upper bound check of tree index in dbAllocAG 2025-08-20 18:41:23 +02:00
jfs_dmap.h
jfs_dtree.c jfs: fix array-index-out-of-bounds read in add_missing_indices 2025-04-03 09:11:43 -05:00
jfs_dtree.h
jfs_extent.c jfs: add check read-only before txBeginAnon() call 2025-02-19 15:28:49 -06:00
jfs_extent.h
jfs_filsys.h jfs: convert jfs to use the new mount api 2024-10-08 14:41:53 +02:00
jfs_imap.c jfs: Prevent copying of nlink with value 0 from disk inode 2025-02-20 09:56:40 -06:00
jfs_imap.h
jfs_incore.h
jfs_inode.c
jfs_inode.h
jfs_lock.h
jfs_logmgr.c
jfs_logmgr.h
jfs_metapage.c jfs: implement migrate_folio for jfs_metapage_aops 2025-05-12 23:50:47 -07:00
jfs_metapage.h
jfs_mount.c
jfs_superblock.h
jfs_txnmgr.c
jfs_txnmgr.h
jfs_types.h
jfs_umount.c
jfs_unicode.c
jfs_unicode.h
jfs_xattr.h
jfs_xtree.c
jfs_xtree.h
Kconfig
Makefile
namei.c Change inode_operations.mkdir to return struct dentry * 2025-02-27 20:00:17 +01:00
resize.c
super.c jfs: Remove reference to bh->b_page 2025-02-13 12:29:02 -06:00
symlink.c
xattr.c jfs: fix slab-out-of-bounds read in ea_get() 2025-02-19 16:20:14 -06:00