diff options
| author | Andreas Gruenbacher <agruenba@redhat.com> | 2022-12-04 19:00:04 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2023-04-05 12:15:42 +0300 |
| commit | 45df749f827c286adbc951f2a4865b67f0442ba9 (patch) | |
| tree | dc7811c5cdde543913b0fa4c3799807af5a60dd5 /sound/ac97/codec.c | |
| parent | 51a8f136adc99db604c50a545328e0fa5047e472 (diff) | |
| download | linux-45df749f827c286adbc951f2a4865b67f0442ba9.tar.xz | |
gfs2: Always check inode size of inline inodes
commit 70376c7ff31221f1d21db5611d8209e677781d3a upstream.
Check if the inode size of stuffed (inline) inodes is within the allowed
range when reading inodes from disk (gfs2_dinode_in()). This prevents
us from on-disk corruption.
The two checks in stuffed_readpage() and gfs2_unstuffer_page() that just
truncate inline data to the maximum allowed size don't actually make
sense, and they can be removed now as well.
Reported-by: syzbot+7bb81dfa9cda07d9cd9d@syzkaller.appspotmail.com
Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
[pchelkin@ispras.ru: adjust the inode variable inside gfs2_dinode_in with
the format used before upstream commit 7db354444ad8 ("gfs2: Cosmetic
gfs2_dinode_{in,out} cleanup")]
Signed-off-by: Fedor Pchelkin <pchelkin@ispras.ru>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'sound/ac97/codec.c')
0 files changed, 0 insertions, 0 deletions