fs/ntfs3: Additional check in ntfs_file_release
BugLink: https://bugs.launchpad.net/bugs/2099996 [ Upstream commit 031d6f608290c847ba6378322d0986d08d1a645a ] Reported-by: syzbot+8c652f14a0fde76ff11d@syzkaller.appspotmail.com Signed-off-by: Konstantin Komarov <almaz.alexandrovich@paragon-software.com> Signed-off-by: Sasha Levin <sashal@kernel.org> CVE-2024-50242 Signed-off-by: Koichiro Den <koichiro.den@canonical.com> Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
This commit is contained in:
committed by
Stefan Bader
parent
6c8e4dd1f1
commit
8c99b89d7d
+8
-1
@@ -1209,7 +1209,14 @@ static int ntfs_file_release(struct inode *inode, struct file *file)
|
||||
/* If we are last writer on the inode, drop the block reservation. */
|
||||
if (sbi->options->prealloc &&
|
||||
((file->f_mode & FMODE_WRITE) &&
|
||||
atomic_read(&inode->i_writecount) == 1)) {
|
||||
atomic_read(&inode->i_writecount) == 1)
|
||||
/*
|
||||
* The only file when inode->i_fop = &ntfs_file_operations and
|
||||
* init_rwsem(&ni->file.run_lock) is not called explicitly is MFT.
|
||||
*
|
||||
* Add additional check here.
|
||||
*/
|
||||
&& inode->i_ino != MFT_REC_MFT) {
|
||||
ni_lock(ni);
|
||||
down_write(&ni->file.run_lock);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user