diff options
| author | Aditya Dutt <[email protected]> | 2025-04-01 15:29:16 +0000 |
|---|---|---|
| committer | Dave Kleikamp <[email protected]> | 2025-04-03 14:11:43 +0000 |
| commit | 5dff41a86377563f7a2b968aae00d25b4ceb37c9 (patch) | |
| tree | b8722159c5128915b49ea43a56fb58252abc5aee /drivers/net/dsa/dsa_loop.c | |
| parent | jfs: Fix null-ptr-deref in jfs_ioc_trim (diff) | |
| download | kernel-5dff41a86377563f7a2b968aae00d25b4ceb37c9.tar.gz kernel-5dff41a86377563f7a2b968aae00d25b4ceb37c9.zip | |
jfs: fix array-index-out-of-bounds read in add_missing_indices
stbl is s8 but it must contain offsets into slot which can go from 0 to
127.
Added a bound check for that error and return -EIO if the check fails.
Also make jfs_readdir return with error if add_missing_indices returns
with an error.
Reported-by: [email protected]
Closes: https://syzkaller.appspot.com./bug?extid=b974bd41515f770c608b
Signed-off-by: Aditya Dutt <[email protected]>
Signed-off-by: Dave Kleikamp <[email protected]>
Diffstat (limited to 'drivers/net/dsa/dsa_loop.c')
0 files changed, 0 insertions, 0 deletions