kernel_samsung_a53x/fs/jfs
Edward Adam Davis 9fcdffe74e jfs: check if leafidx greater than num leaves per dmap tree
[ Upstream commit d64ff0d2306713ff084d4b09f84ed1a8c75ecc32 ]

syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater
than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf.

Shaggy:
Modified sanity check to apply to control pages as well as leaf pages.

Reported-and-tested-by: syzbot+dca05492eff41f604890@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=dca05492eff41f604890
Signed-off-by: Edward Adam Davis <eadavis@qq.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-11-23 23:21:40 +01:00
..
acl.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
file.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
inode.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
ioctl.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_acl.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_btree.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_debug.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_debug.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_dinode.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_discard.c jfs: Fix uaf in dbFreeBits 2024-11-23 23:21:40 +01:00
jfs_discard.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_dmap.c jfs: check if leafidx greater than num leaves per dmap tree 2024-11-23 23:21:40 +01:00
jfs_dmap.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_dtree.c jfs: fix slab-out-of-bounds Read in dtSearch 2024-11-18 12:13:09 +01:00
jfs_dtree.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_extent.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_extent.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_filsys.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_imap.c jfs: fix out-of-bounds in dbNextAG() and diAlloc() 2024-11-23 23:21:21 +01:00
jfs_imap.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_incore.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_inode.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_inode.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_lock.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_logmgr.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_logmgr.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_metapage.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_metapage.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_mount.c jfs: fix uaf in jfs_evict_inode 2024-11-18 12:13:09 +01:00
jfs_superblock.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_txnmgr.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_txnmgr.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_types.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_umount.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_unicode.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_unicode.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_uniupr.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_xattr.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_xtree.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
jfs_xtree.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
Kconfig Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
Makefile Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
namei.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
resize.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
super.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
symlink.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
xattr.c jfs: don't walk off the end of ealist 2024-11-19 14:19:51 +01:00