Ryusuke Konishi 257f9e5185 nilfs2: fix potential oob read in nilfs_btree_check_delete() ... [ Upstream commit f9c96351aa6718b42a9f42eaf7adce0356bdb5e8 ] The function nilfs_btree_check_delete(), which checks whether degeneration to direct mapping occurs before deleting a b-tree entry, causes memory access outside the block buffer when retrieving the maximum key if the root node has no entries. This does not usually happen because b-tree mappings with 0 child nodes are never created by mkfs.nilfs2 or nilfs2 itself. However, it can happen if the b-tree root node read from a device is configured that way, so fix this potential issue by adding a check for that case. Link: https://lkml.kernel.org/r/20240904081401.16682-4-konishi.ryusuke@gmail.com Fixes: 17c76b0104 ("nilfs2: B-tree based block mapping") Signed-off-by: Ryusuke Konishi <konishi.ryusuke@gmail.com> Cc: Lizhi Xu <lizhi.xu@windriver.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-10-04 16:29:22 +02:00
..
Kconfig	fs: add CONFIG_BUFFER_HEAD	2023-08-02 09:13:09 -06:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
alloc.c	nilfs2: fix incorrect inode allocation from reserved inodes	2024-07-11 12:49:22 +02:00
alloc.h	nilfs2: fix incorrect inode allocation from reserved inodes	2024-07-11 12:49:22 +02:00
bmap.c	nilfs2: fix infinite loop in nilfs_mdt_get_block()	2023-05-06 10:10:07 -07:00
bmap.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
btnode.c	nilfs2: handle inconsistent state in nilfs_btnode_create_block()	2024-08-03 08:54:33 +02:00
btnode.h	fs/nilfs2: Use the enum req_op and blk_opf_t types	2022-07-14 12:14:33 -06:00
btree.c	nilfs2: fix potential oob read in nilfs_btree_check_delete()	2024-10-04 16:29:22 +02:00
btree.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
cpfile.c	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
cpfile.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
dat.c	nilfs2: fix incorrect inode allocation from reserved inodes	2024-07-11 12:49:22 +02:00
dat.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
dir.c	nilfs2: fix kernel bug on rename operation of broken directory	2024-07-18 13:21:25 +02:00
direct.c	nilfs2: fix failure to detect DAT corruption in btree and direct mappings	2024-04-03 15:28:34 +02:00
direct.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
export.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
file.c	nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()	2024-02-23 09:25:11 +01:00
gcinode.c	nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()	2023-09-29 17:20:46 -07:00
ifile.c	nilfs2: fix incorrect inode allocation from reserved inodes	2024-07-11 12:49:22 +02:00
ifile.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
inode.c	nilfs2: prevent kernel bug at submit_bh_wbc()	2024-04-03 15:28:34 +02:00
ioctl.c	nilfs2: fix out-of-range warning	2024-06-12 11:11:31 +02:00
mdt.c	nilfs2: replace obvious uses of b_page with b_folio	2023-01-18 17:12:41 -08:00
mdt.h	nilfs2: fix lockdep warnings during disk space reclamation	2022-04-01 11:46:09 -07:00
namei.c	nilfs2: convert to ctime accessor functions	2023-07-24 10:30:02 +02:00
nilfs.h	nilfs2: add missing check for inode numbers on directory entries	2024-07-11 12:49:15 +02:00
page.c	nilfs2: prevent general protection fault in nilfs_clear_dirty_page()	2023-06-19 13:19:35 -07:00
page.h	nilfs2: get rid of nilfs_mapping_init()	2022-04-01 11:46:09 -07:00
recovery.c	nilfs2: fix missing cleanup on rollforward recovery error	2024-09-12 11:11:28 +02:00
segbuf.c	nilfs2: fix buffer corruption due to concurrent device reads	2023-06-19 13:19:33 -07:00
segbuf.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
segment.c	nilfs2: fix state management in error path of log writing function	2024-09-12 11:11:28 +02:00
segment.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
sufile.c	nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()	2023-12-13 18:45:22 +01:00
sufile.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
super.c	nilfs2: use setup_bdev_super to de-duplicate the mount code	2023-08-10 10:34:56 +02:00
sysfs.c	nilfs2: protect references to superblock parameters exposed in sysfs	2024-09-12 11:11:28 +02:00
sysfs.h	nilfs2: remove filenames from file comments	2021-11-09 10:02:52 -08:00
the_nilfs.c	nilfs2: fix inode number range checks	2024-07-11 12:49:15 +02:00
the_nilfs.h	nilfs2: fix inode number range checks	2024-07-11 12:49:15 +02:00