moonjuice/kernel_arpi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
7c6bd60999f32138e3b73fd97ea11ef47a94de25
kernel_arpi/fs
History
Dongliang Mu 24ab2d4ef5 ntfs: add sanity check on allocation size 
[ Upstream commit 714fbf2647b1a33d914edd695d4da92029c7e7c0 ]

ntfs_read_inode_mount invokes ntfs_malloc_nofs with zero allocation
size.  It triggers one BUG in the __ntfs_malloc function.

Fix this by adding sanity check on ni->attr_list_size.

Link: https://lkml.kernel.org/r/20220120094914.47736-1-dzm91@hust.edu.cn
Reported-by: syzbot+3c765c5248797356edaa@syzkaller.appspotmail.com
Signed-off-by: Dongliang Mu <mudongliangabcd@gmail.com>
Acked-by: Anton Altaparmakov <anton@tuxera.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:23:58 +02:00
..
9p
Revert "fs/9p: search open fids first"
2022-02-08 18:34:04 +01:00
adfs
…
affs
…
afs
afs: Fix mmap
2021-12-22 09:32:45 +01:00
autofs
autofs: fix wait name hash calculation in autofs_wait()
2021-10-20 21:09:02 -04:00
befs
…
bfs
…
btrfs
btrfs: make search_csum_tree return 0 if we get -EFBIG
2022-04-08 14:23:58 +02:00
cachefiles
…
ceph
ceph: put the requests/sessions when it fails to alloc memory
2022-02-01 17:27:14 +01:00
cifs
Adjust cifssb maximum read size
2022-04-08 14:23:58 +02:00
coda
…
configfs
configfs: fix a race in configfs_{,un}register_subsystem()
2022-03-02 11:48:02 +01:00
cramfs
…
crypto
fscrypt: allow 256-bit master keys with AES-256-XTS
2021-11-18 19:16:11 +01:00
debugfs
debugfs: lockdown: Allow reading debugfs files that are not world readable
2022-01-27 11:03:55 +01:00
devpts
fsnotify: fix fsnotify hooks in pseudo filesystems
2022-02-01 17:27:01 +01:00
dlm
fs: dlm: filter user dlm messages for kernel locks
2022-01-27 11:04:23 +01:00
ecryptfs
…
efivarfs
…
efs
…
erofs
erofs: fix deadlock when shrink erofs slab
2021-12-01 09:04:50 +01:00
exfat
exfat: fix i_blocks for files truncated over 4 GiB
2022-03-08 19:12:32 +01:00
exportfs
…
ext2
ext2: correct max file size computing
2022-04-08 14:23:35 +02:00
ext4
ext4: don't BUG if someone dirty pages without asking ext4 first
2022-04-08 14:23:57 +02:00
f2fs
f2fs: compress: fix to print raw data size in error path of lz4 decompression
2022-04-08 14:23:58 +02:00
fat
…
freevxfs
…
fscache
fscache: Remove an unused static variable
2021-10-04 22:13:12 +01:00
fuse
fuse: fix pipe buffer lifetime for direct_io
2022-03-16 14:23:42 +01:00
gfs2
gfs2: Fix gfs2_release for non-writers regression
2022-02-16 12:56:18 +01:00
hfs
…
hfsplus
…
hostfs
…
hpfs
…
hugetlbfs
hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
2022-03-08 19:12:38 +01:00
iomap
iomap: Fix inline extent handling in iomap_readpage
2021-12-01 09:04:44 +01:00
isofs
isofs: Fix out of bound access for corrupted isofs image
2021-11-12 15:05:50 +01:00
jbd2
ext4: fast commit may not fallback for ineligible commit
2022-03-08 19:12:32 +01:00
jffs2
jffs2: fix memory leak in jffs2_scan_medium
2022-04-08 14:22:53 +02:00
jfs
jfs: fix divide error in dbNextAG
2022-04-08 14:23:51 +02:00
kernfs
kernfs: don't create a negative dentry if inactive node exists
2021-10-04 10:27:18 +02:00
ksmbd
ksmbd: don't align last entry offset in smb2 query directory
2022-02-23 12:03:18 +01:00
lockd
lockd: fix failure to cleanup client locks
2022-02-05 12:38:57 +01:00
minix
…
netfs
netfs: fix parameter of cleanup()
2021-12-29 12:28:59 +01:00
nfs
NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
2022-04-08 14:23:54 +02:00
nfs_common
nfs: Fix kerneldoc warning shown up by W=1
2021-10-04 22:02:17 +01:00
nfsd
NFSD: Fix nfsd_breaker_owns_lease() return values
2022-04-08 14:23:57 +02:00
nilfs2
…
nls
…
notify
fanotify: Fix stale file descriptor in copy_event_to_user()
2022-02-05 12:38:59 +01:00
ntfs
ntfs: add sanity check on allocation size
2022-04-08 14:23:58 +02:00
ntfs3
Merge tag 'ntfs3_for_5.15' of git://github.com/Paragon-Software-Group/linux-ntfs3
2021-10-15 09:58:11 -04:00
ocfs2
ocfs2: fix crash when mount with quota enabled
2022-04-08 14:22:56 +02:00
omfs
…
openpromfs
…
orangefs
orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
2022-01-20 09:13:13 +01:00
overlayfs
ovl: fix NULL pointer dereference in copy up warning
2022-02-05 12:38:59 +01:00
proc
proc: fix documentation and description of pagemap
2022-03-08 19:12:54 +01:00
pstore
pstore: Don't use semaphores in always-atomic-context code
2022-04-08 14:23:01 +02:00
qnx4
…
qnx6
…
quota
quota: make dquot_quota_sync return errors from ->sync_fs
2022-02-23 12:03:06 +01:00
ramfs
…
reiserfs
…
romfs
…
smbfs_common
cifs: Fix crash on unload of cifs_arc4.ko
2021-12-14 10:57:12 +01:00
squashfs
…
sysfs
…
sysv
…
tracefs
tracefs: Set the group ownership in apply_options() not parse_options()
2022-03-02 11:48:05 +01:00
ubifs
ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
2022-01-27 11:05:07 +01:00
udf
udf: Fix NULL ptr deref when converting from inline format
2022-02-01 17:27:00 +01:00
ufs
…
unicode
…
vboxsf
…
verity
…
xfs
xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
2022-01-11 15:35:16 +01:00
zonefs
zonefs: add MODULE_ALIAS_FS
2021-12-22 09:32:48 +01:00
aio.c
aio: Fix incorrect usage of eventfd_signal_allowed()
2021-12-14 10:57:22 +01:00
anon_inodes.c
…
attr.c
fs: handle circular mappings correctly
2021-11-25 09:48:46 +01:00
bad_inode.c
…
binfmt_aout.c
…
binfmt_elf_fdpic.c
…
binfmt_elf.c
fs/binfmt_elf: Fix AT_PHDR for unusual ELF files
2022-04-08 14:23:56 +02:00
binfmt_flat.c
…
binfmt_misc.c
…
binfmt_script.c
…
buffer.c
mm: fs: fix lru_cache_disabled race in bh_lru
2022-04-08 14:22:54 +02:00
char_dev.c
…
compat_binfmt_elf.c
…
coredump.c
coredump: Also dump first pages of non-executable ELF libraries
2022-04-08 14:22:58 +02:00
d_path.c
…
dax.c
…
dcache.c
…
direct-io.c
…
drop_caches.c
…
eventfd.c
…
eventpoll.c
…
exec.c
exec: Force single empty string when argv is empty
2022-04-08 14:23:01 +02:00
fcntl.c
…
fhandle.c
…
file_table.c
…
file.c
fs: fix fd table size alignment properly
2022-04-08 14:23:54 +02:00
filesystems.c
…
fs_context.c
vfs: fs_context: fix up param length parsing in legacy_parse_param
2022-01-20 09:13:14 +01:00
fs_parser.c
…
fs_pin.c
…
fs_struct.c
…
fs_types.c
…
fs-writeback.c
…
fsopen.c
…
init.c
…
inode.c
fs: export an inode_update_time helper
2021-11-25 09:49:08 +01:00
internal.h
…
io_uring.c
io_uring: terminate manual loop iterator loop correctly for non-vecs
2022-04-08 14:23:10 +02:00
io-wq.c
io-wq: drop wqe lock before creating new worker
2021-12-22 09:32:51 +01:00
io-wq.h
…
ioctl.c
…
Kconfig
…
Kconfig.binfmt
…
kernel_read_file.c
vfs: check fd has read access in kernel_read_file_from_fd()
2021-10-18 20:22:03 -10:00
libfs.c
…
locks.c
…
Makefile
…
mbcache.c
…
mount.h
…
mpage.c
…
namei.c
fsnotify: invalidate dcache before IN_DELETE event
2022-02-01 17:27:15 +01:00
namespace.c
fs/mount_setattr: always cleanup mount_kattr
2022-01-05 12:42:39 +01:00
no-block.c
…
nsfs.c
…
open.c
mm, thp: fix incorrect unmap behavior for private pages
2021-11-18 19:17:17 +01:00
pipe.c
watch_queue: Fix lack of barrier/sync/lock between post and read
2022-03-16 14:23:44 +01:00
pnode.c
…
pnode.h
…
posix_acl.c
…
proc_namespace.c
…
read_write.c
…
readdir.c
…
remap_range.c
…
select.c
select: Fix indefinitely sleeping task in poll_schedule_timeout()
2022-01-29 10:58:25 +01:00
seq_file.c
…
signalfd.c
signalfd: use wake_up_pollfree()
2021-12-14 10:57:15 +01:00
splice.c
…
stack.c
…
stat.c
…
statfs.c
…
super.c
vfs: make freeze_super abort when sync_filesystem returns error
2022-02-23 12:03:05 +01:00
sync.c
…
timerfd.c
…
userfaultfd.c
userfaultfd: fix a race between writeprotect and exit_mmap()
2021-10-18 20:22:02 -10:00
utimes.c
…
xattr.c
…