diff options
| author | Jeongjun Park <[email protected]> | 2024-08-19 04:05:46 +0000 |
|---|---|---|
| committer | Dave Kleikamp <[email protected]> | 2024-08-23 19:15:00 +0000 |
| commit | e63866a475562810500ea7f784099bfe341e761a (patch) | |
| tree | 2944f21a6c04e9a3ac4c856dc66e80eb3cc2a683 /lib/crypto/mpi/mpi-mul.c | |
| parent | jfs: UBSAN: shift-out-of-bounds in dbFindBits (diff) | |
| download | kernel-e63866a475562810500ea7f784099bfe341e761a.tar.gz kernel-e63866a475562810500ea7f784099bfe341e761a.zip | |
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
In dbNextAG() , there is no check for the case where bmp->db_numag is
greater or same than MAXAG due to a polluted image, which causes an
out-of-bounds. Therefore, a bounds check should be added in dbMount().
And in dbNextAG(), a check for the case where agpref is greater than
bmp->db_numag should be added, so an out-of-bounds exception should be
prevented.
Additionally, a check for the case where agno is greater or same than
MAXAG should be added in diAlloc() to prevent out-of-bounds.
Reported-by: Jeongjun Park <[email protected]>
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Jeongjun Park <[email protected]>
Signed-off-by: Dave Kleikamp <[email protected]>
Diffstat (limited to 'lib/crypto/mpi/mpi-mul.c')
0 files changed, 0 insertions, 0 deletions