Nihar Chaithanya 3b5d21b56c jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree ...

[ Upstream commit a174706ba4dad895c40b1d2277bade16dfacdcd9 ]

When the value of lp is 0 at the beginning of the for loop, it will
become negative in the next assignment and we should bail out.

Reported-by: syzbot+412dea214d8baa3f7483@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=412dea214d8baa3f7483
Tested-by: syzbot+412dea214d8baa3f7483@syzkaller.appspotmail.com
Signed-off-by: Nihar Chaithanya <niharchaithanya@gmail.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-12-14 20:00:07 +01:00

..

acl.c

jfs: convert to ctime accessor functions

2023-07-24 10:30:01 +02:00

file.c

splice: Use filemap_splice_read() instead of generic_file_splice_read()

2023-05-24 08:42:17 -06:00

inode.c

jfs: convert to ctime accessor functions

2023-07-24 10:30:01 +02:00

ioctl.c

jfs: convert to ctime accessor functions

2023-07-24 10:30:01 +02:00

jfs_acl.h

fs: port ->set_acl() to pass mnt_idmap

2023-01-19 09:24:27 +01:00

jfs_btree.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_debug.c

proc: convert everything to "struct proc_ops"

2020-02-04 03:05:26 +00:00

jfs_debug.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_dinode.h

jfs: define xtree root and page independently

2024-08-29 17:33:42 +02:00

jfs_discard.c

jfs: Fix uaf in dbFreeBits

2024-10-10 11:57:33 +02:00

jfs_discard.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_dmap.c

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

2024-12-14 20:00:07 +01:00

jfs_dmap.h

jfs: Fix array index bounds check in dbAdjTree

2020-11-13 16:03:07 -06:00

jfs_dtree.c

jfs: fix array-index-out-of-bounds in jfs_readdir

2024-12-14 20:00:07 +01:00

jfs_dtree.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_extent.c

jfs: validate max amount of blocks before allocation.

2023-08-29 12:25:47 -05:00

jfs_extent.h

jfs: remove unused declarations for jfs

2022-10-18 08:50:26 -05:00

jfs_filsys.h

jfs: jfs_dmap: Validate db_l2nbperpage while mounting

2023-06-20 12:37:50 -05:00

jfs_imap.c

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

2024-10-04 16:29:10 +02:00

jfs_imap.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_incore.h

jfs: define xtree root and page independently

2024-08-29 17:33:42 +02:00

jfs_inode.c

jfs: convert to ctime accessor functions

2023-07-24 10:30:01 +02:00

jfs_inode.h

fs: port ->fileattr_set() to pass mnt_idmap

2023-01-19 09:24:27 +01:00

jfs_lock.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_logmgr.c

jfs: fix log->bdev_handle null ptr deref in lbmStartIO

2024-08-19 06:04:25 +02:00

jfs_logmgr.h

jfs: Convert to bdev_open_by_dev()

2024-08-19 06:04:25 +02:00

jfs_metapage.c

mm,jfs: move write_one_page/folio_write_one to jfs

2023-03-12 20:00:42 -04:00

jfs_metapage.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_mount.c

jfs: Convert to bdev_open_by_dev()

2024-08-19 06:04:25 +02:00

jfs_superblock.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_txnmgr.c

jfs: define xtree root and page independently

2024-08-29 17:33:42 +02:00

jfs_txnmgr.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_types.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_umount.c

jfs: Fix a typo in function jfs_umount

2022-11-10 15:08:00 -06:00

jfs_unicode.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_unicode.h

fs/jfs: Use common ucs2 upper case table

2023-08-30 08:55:52 -05:00

jfs_xattr.h

fs/jfs/jfs_xattr.h: Fix spelling typo in comment

2022-10-18 08:50:26 -05:00

jfs_xtree.c

jfs: define xtree root and page independently

2024-08-29 17:33:42 +02:00

jfs_xtree.h

jfs: define xtree root and page independently

2024-08-29 17:33:42 +02:00

Kconfig

Merge tag '6.6-rc-smb3-client-fixes-part1' of git://git.samba.org/sfrench/cifs-2.6

2023-08-30 21:01:40 -07:00

Makefile

fs/jfs: Use common ucs2 upper case table

2023-08-30 08:55:52 -05:00

namei.c

Merge tag 'jfs-6.6' of github.com:kleikamp/linux-shaggy

2023-08-31 15:25:01 -07:00

resize.c

jfs: use sb_bdev_nr_blocks

2021-10-18 14:43:23 -06:00

super.c

quota: Properly annotate i_dquot arrays with __rcu

2024-03-26 18:19:46 -04:00

symlink.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

xattr.c

jfs: xattr: check invalid xattr size more strictly

2024-12-09 10:32:42 +01:00