Nihar Chaithanya 028adb1ffe jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree ... [ Upstream commit a174706ba4dad895c40b1d2277bade16dfacdcd9 ] When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out. Reported-by: syzbot+412dea214d8baa3f7483@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=412dea214d8baa3f7483 Tested-by: syzbot+412dea214d8baa3f7483@syzkaller.appspotmail.com Signed-off-by: Nihar Chaithanya <niharchaithanya@gmail.com> Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-12-17 13:24:31 +01:00
..
acl.c
file.c
inode.c
ioctl.c
jfs_acl.h
jfs_btree.h
jfs_debug.c
jfs_debug.h
jfs_dinode.h
jfs_discard.c	Revert "jfs: Fix uaf in dbFreeBits"	2024-11-24 00:23:06 +01:00
jfs_discard.h
jfs_dmap.c	jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree	2024-12-17 13:24:31 +01:00
jfs_dmap.h
jfs_dtree.c	jfs: fix array-index-out-of-bounds in jfs_readdir	2024-12-17 13:24:31 +01:00
jfs_dtree.h
jfs_extent.c
jfs_extent.h
jfs_filsys.h
jfs_imap.c	jfs: fix out-of-bounds in dbNextAG() and diAlloc()	2024-11-23 23:21:21 +01:00
jfs_imap.h
jfs_incore.h
jfs_inode.c
jfs_inode.h
jfs_lock.h
jfs_logmgr.c
jfs_logmgr.h
jfs_metapage.c
jfs_metapage.h
jfs_mount.c	jfs: fix uaf in jfs_evict_inode	2024-11-18 12:13:09 +01:00
jfs_superblock.h
jfs_txnmgr.c
jfs_txnmgr.h
jfs_types.h
jfs_umount.c
jfs_unicode.c
jfs_unicode.h
jfs_uniupr.c
jfs_xattr.h
jfs_xtree.c
jfs_xtree.h
Kconfig
Makefile
namei.c
resize.c
super.c
symlink.c
xattr.c	jfs: xattr: check invalid xattr size more strictly	2024-12-17 13:24:17 +01:00