Aditya Dutt 5dff41a863 jfs: fix array-index-out-of-bounds read in add_missing_indices ...

stbl is s8 but it must contain offsets into slot which can go from 0 to
127.

Added a bound check for that error and return -EIO if the check fails.
Also make jfs_readdir return with error if add_missing_indices returns
with an error.

Reported-by: syzbot+b974bd41515f770c608b@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com./bug?extid=b974bd41515f770c608b
Signed-off-by: Aditya Dutt <duttaditya18@gmail.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>

2025-04-03 09:11:43 -05:00

..

acl.c

jfs: convert to ctime accessor functions

2023-07-24 10:30:01 +02:00

file.c

splice: Use filemap_splice_read() instead of generic_file_splice_read()

2023-05-24 08:42:17 -06:00

inode.c

jfs: add check read-only before truncation in jfs_truncate_nolock()

2025-02-19 15:29:08 -06:00

ioctl.c

jfs: convert to ctime accessor functions

2023-07-24 10:30:01 +02:00

jfs_acl.h

fs: port ->set_acl() to pass mnt_idmap

2023-01-19 09:24:27 +01:00

jfs_btree.h

…

jfs_debug.c

…

jfs_debug.h

…

jfs_dinode.h

jfs: define xtree root and page independently

2023-10-13 10:39:25 -05:00

jfs_discard.c

jfs: Fix null-ptr-deref in jfs_ioc_trim

2025-04-03 09:11:42 -05:00

jfs_discard.h

…

jfs_dmap.c

jfs: validate AG parameters in dbMount() to prevent crashes

2025-04-03 09:11:42 -05:00

jfs_dmap.h

jfs: Fix array index bounds check in dbAdjTree

2020-11-13 16:03:07 -06:00

jfs_dtree.c

jfs: fix array-index-out-of-bounds read in add_missing_indices

2025-04-03 09:11:43 -05:00

jfs_dtree.h

…

jfs_extent.c

jfs: add check read-only before txBeginAnon() call

2025-02-19 15:28:49 -06:00

jfs_extent.h

jfs: remove unused declarations for jfs

2022-10-18 08:50:26 -05:00

jfs_filsys.h

jfs: convert jfs to use the new mount api

2024-10-08 14:41:53 +02:00

jfs_imap.c

jfs: Prevent copying of nlink with value 0 from disk inode

2025-02-20 09:56:40 -06:00

jfs_imap.h

…

jfs_incore.h

quota: Properly annotate i_dquot arrays with __rcu

2024-02-08 12:04:59 +01:00

jfs_inode.c

jfs: convert to new timestamp accessors

2023-10-18 14:08:23 +02:00

jfs_inode.h

fs: port ->fileattr_set() to pass mnt_idmap

2023-01-19 09:24:27 +01:00

jfs_lock.h

…

jfs_logmgr.c

jfs: Change metapage->page to metapage->folio

2024-05-27 20:37:06 -05:00

jfs_logmgr.h

jfs: port block device access to file

2024-02-25 12:05:26 +01:00

jfs_metapage.c

jfs: Remove use of folio error flag

2024-05-27 20:37:06 -05:00

jfs_metapage.h

jfs: Change metapage->page to metapage->folio

2024-05-27 20:37:06 -05:00

jfs_mount.c

jfs: port block device access to file

2024-02-25 12:05:26 +01:00

jfs_superblock.h

…

jfs_txnmgr.c

jfs: Add missing set_freezable() for freezable kthread

2024-01-02 11:06:52 -06:00

jfs_txnmgr.h

…

jfs_types.h

…

jfs_umount.c

jfs: Fix a typo in function jfs_umount

2022-11-10 15:08:00 -06:00

jfs_unicode.c

…

jfs_unicode.h

fs/jfs: Use common ucs2 upper case table

2023-08-30 08:55:52 -05:00

jfs_xattr.h

jfs: move jfs_xattr_handlers to .rodata

2023-10-09 16:24:19 +02:00

jfs_xtree.c

jfs: define xtree root and page independently

2023-10-13 10:39:25 -05:00

jfs_xtree.h

jfs: define xtree root and page independently

2023-10-13 10:39:25 -05:00

Kconfig

Merge tag '6.6-rc-smb3-client-fixes-part1' of git://git.samba.org/sfrench/cifs-2.6

2023-08-30 21:01:40 -07:00

Makefile

fs/jfs: Use common ucs2 upper case table

2023-08-30 08:55:52 -05:00

namei.c

Change inode_operations.mkdir to return struct dentry *

2025-02-27 20:00:17 +01:00

resize.c

jfs: use sb_bdev_nr_blocks

2021-10-18 14:43:23 -06:00

super.c

jfs: Remove reference to bh->b_page

2025-02-13 12:29:02 -06:00

symlink.c

…

xattr.c

jfs: fix slab-out-of-bounds read in ea_get()

2025-02-19 16:20:14 -06:00