Ghanshyam Agrawal 2bc0bfa827 jfs: fix array-index-out-of-bounds in jfs_readdir ...

BugLink: https://bugs.launchpad.net/bugs/2102118

[ Upstream commit 839f102efb168f02dfdd46717b7c6dddb26b015e ]

The stbl might contain some invalid values. Added a check to
return error code in that case.

Reported-by: syzbot+0315f8fe99120601ba88@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=0315f8fe99120601ba88
Signed-off-by: Ghanshyam Agrawal <ghanshyam1898@gmail.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
CVE-2024-56596
Signed-off-by: Koichiro Den <koichiro.den@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

2025-03-14 14:31:45 +01:00

..

acl.c

…

file.c

splice: Use filemap_splice_read() instead of generic_file_splice_read()

2023-05-24 08:42:17 -06:00

inode.c

jfs: convert to new timestamp accessors

2023-10-18 14:08:23 +02:00

ioctl.c

…

jfs_acl.h

fs: port ->set_acl() to pass mnt_idmap

2023-01-19 09:24:27 +01:00

jfs_btree.h

…

jfs_debug.c

…

jfs_debug.h

…

jfs_dinode.h

…

jfs_discard.c

jfs: Fix uaf in dbFreeBits

2025-01-17 14:44:24 +03:00

jfs_discard.h

…

jfs_dmap.c

jfs: fix shift-out-of-bounds in dbSplit

2025-03-14 14:31:45 +01:00

jfs_dmap.h

…

jfs_dtree.c

jfs: fix array-index-out-of-bounds in jfs_readdir

2025-03-14 14:31:45 +01:00

jfs_dtree.h

…

jfs_extent.c

…

jfs_extent.h

…

jfs_filsys.h

…

jfs_imap.c

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

2025-01-17 14:43:09 +03:00

jfs_imap.h

…

jfs_incore.h

quota: Properly annotate i_dquot arrays with __rcu

2024-05-01 15:54:48 +02:00

jfs_inode.c

jfs: convert to new timestamp accessors

2023-10-18 14:08:23 +02:00

jfs_inode.h

…

jfs_lock.h

…

jfs_logmgr.c

…

jfs_logmgr.h

…

jfs_metapage.c

mm,jfs: move write_one_page/folio_write_one to jfs

2023-03-12 20:00:42 -04:00

jfs_metapage.h

…

jfs_mount.c

…

jfs_superblock.h

…

jfs_txnmgr.c

…

jfs_txnmgr.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_types.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_umount.c

…

jfs_unicode.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

jfs_unicode.h

…

jfs_xattr.h

…

jfs_xtree.c

jfs: define xtree root and page independently

2023-10-13 10:39:25 -05:00

jfs_xtree.h

jfs: define xtree root and page independently

2023-10-13 10:39:25 -05:00

Kconfig

…

Makefile

…

namei.c

jfs: convert to new timestamp accessors

2023-10-18 14:08:23 +02:00

resize.c

…

super.c

quota: Properly annotate i_dquot arrays with __rcu

2024-05-01 15:54:48 +02:00

symlink.c

…

xattr.c

jfs: xattr: check invalid xattr size more strictly

2025-03-14 14:31:08 +01:00