Phillip Lougher 984ed0567f Squashfs: fix variable overflow triggered by sysbot ... [ Upstream commit 12427de9439d68b8e96ba6f50b601ef15f437612 ] Sysbot reports a slab out of bounds write in squashfs_readahead(). This is ultimately caused by a file reporting an (infeasibly) large file size (1407374883553280 bytes) with the minimum block size of 4K. This causes variable overflow. Link: https://lkml.kernel.org/r/20231113160901.6444-1-phillip@squashfs.org.uk Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk> Reported-by: syzbot+604424eb051c2f696163@syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/000000000000b1fda20609ede0d1@google.com/ Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-08-19 06:04:26 +02:00
..
Kconfig	squashfs: allows users to configure the number of decompression threads	2022-11-18 13:55:08 -08:00
Makefile	squashfs: always build "file direct" version of page actor	2022-07-29 18:12:34 -07:00
block.c	squashfs: squashfs_read_data need to check if the length is 0	2024-08-19 06:04:26 +02:00
cache.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 35	2019-05-24 17:27:11 +02:00
decompressor.c	squashfs: don't include buffer_head.h	2023-06-09 17:44:14 -07:00
decompressor.h	squashfs: extend "page actor" to handle missing pages	2022-06-16 19:58:21 -07:00
decompressor_multi.c	squashfs: allows users to configure the number of decompression threads	2022-11-18 13:55:08 -08:00
decompressor_multi_percpu.c	squashfs: don't include buffer_head.h	2023-06-09 17:44:14 -07:00
decompressor_single.c	squashfs: add the mount parameter theads=<single|multi|percpu>	2022-11-18 13:55:08 -08:00
dir.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 35	2019-05-24 17:27:11 +02:00
export.c	squashfs: fix inode lookup sanity checks	2021-03-25 09:22:55 -07:00
file.c	Squashfs: fix variable overflow triggered by sysbot	2024-08-19 06:04:26 +02:00
file_cache.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 499	2019-06-19 17:09:53 +02:00
file_direct.c	Squashfs: fix variable overflow triggered by sysbot	2024-08-19 06:04:26 +02:00
fragment.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 35	2019-05-24 17:27:11 +02:00
id.c	squashfs: fix xattr id and id lookup sanity checks	2021-03-25 09:22:55 -07:00
inode.c	Squashfs: check the inode number is not the invalid value of zero	2024-05-02 16:32:41 +02:00
lz4_wrapper.c	squashfs: extend "page actor" to handle missing pages	2022-06-16 19:58:21 -07:00
lzo_wrapper.c	squashfs: extend "page actor" to handle missing pages	2022-06-16 19:58:21 -07:00
namei.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 35	2019-05-24 17:27:11 +02:00
page_actor.c	squashfs: fix read regression introduced in readahead code	2022-10-28 13:37:21 -07:00
page_actor.h	squashfs: fix read regression introduced in readahead code	2022-10-28 13:37:21 -07:00
squashfs.h	squashfs: add the mount parameter theads=<single|multi|percpu>	2022-11-18 13:55:08 -08:00
squashfs_fs.h	Squashfs: fix handling and sanity checking of xattr_ids count	2023-01-31 16:44:10 -08:00
squashfs_fs_i.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 35	2019-05-24 17:27:11 +02:00
squashfs_fs_sb.h	squashfs: cache partial compressed blocks	2023-06-09 17:44:14 -07:00
super.c	squashfs: cache partial compressed blocks	2023-06-09 17:44:14 -07:00
symlink.c	squashfs: Convert squashfs to read_folio	2022-05-09 16:21:46 -04:00
xattr.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 35	2019-05-24 17:27:11 +02:00
xattr.h	Squashfs: fix handling and sanity checking of xattr_ids count	2023-01-31 16:44:10 -08:00
xattr_id.c	revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"	2023-02-03 17:52:25 -08:00
xz_wrapper.c	squashfs: extend "page actor" to handle missing pages	2022-06-16 19:58:21 -07:00
zlib_wrapper.c	squashfs: extend "page actor" to handle missing pages	2022-06-16 19:58:21 -07:00
zstd_wrapper.c	squashfs: extend "page actor" to handle missing pages	2022-06-16 19:58:21 -07:00