Gao Xiang 0c9b52bfee erofs: fix incorrect symlink detection in fast symlink ... [ Upstream commit 9ed50b8231e37b1ae863f5dec8153b98d9f389b4 ] Fast symlink can be used if the on-disk symlink data is stored in the same block as the on-disk inode, so we don’t need to trigger another I/O for symlink data. However, currently fs correction could be reported _incorrectly_ if inode xattrs are too large. In fact, these should be valid images although they cannot be handled as fast symlinks. Many thanks to Colin for reporting this! Reported-by: Colin Walters <walters@verbum.org> Reported-by: https://honggfuzz.dev/ Link: https://lore.kernel.org/r/bb2dd430-7de0-47da-ae5b-82ab2dd4d945@app.fastmail.com Fixes: 431339ba90 ("staging: erofs: add inode operations") [ Note that it's a runtime misbehavior instead of a security issue. ] Signed-off-by: Gao Xiang <hsiangkao@linux.alibaba.com> Link: https://lore.kernel.org/r/20240909031911.1174718-1-hsiangkao@linux.alibaba.com Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-10-04 16:29:00 +02:00
..
9p	9p: add missing locking around taking dentry fid list	2024-06-16 13:47:37 +02:00
adfs	…
affs	…
afs	afs: fix __afs_break_callback() / afs_drop_open_mmap() race	2024-08-29 17:33:32 +02:00
autofs	…
befs	…
bfs	…
btrfs	btrfs: update target inode's ctime on unlink	2024-09-18 19:24:05 +02:00
cachefiles	cachefiles: Fix non-taking of sb_writers around set/removexattr	2024-10-04 16:29:00 +02:00
ceph	ceph: fix incorrect kmalloc size of pagevec mempool	2024-08-03 08:54:40 +02:00
coda	…
configfs	…
cramfs	fs: Convert to bdev_open_by_dev()	2024-08-19 06:04:25 +02:00
crypto	…
debugfs	debugfs: fix automount d_fsdata usage	2024-01-20 11:51:37 +01:00
devpts	…
dlm	dlm: fix user space lock decision to copy lvb	2024-06-12 11:11:38 +02:00
ecryptfs	ecryptfs: Fix buffer size for tag 66 packet	2024-06-12 11:11:31 +02:00
efivarfs	efivarfs: Request at most 512 bytes for variable names	2024-03-06 14:48:41 +00:00
efs	…
erofs	erofs: fix incorrect symlink detection in fast symlink	2024-10-04 16:29:00 +02:00
exfat	exfat: fix potential deadlock on __exfat_get_dentry_set	2024-08-03 08:54:12 +02:00
exportfs	…
ext2	ext2: Verify bitmap and itable block numbers before using them	2024-08-03 08:54:15 +02:00
ext4	ext4: fix possible tid_t sequence overflows	2024-09-12 11:11:37 +02:00
f2fs	f2fs: fix to do sanity check on blocks for inline_data inode	2024-09-08 07:54:47 +02:00
fat	fat: fix uninitialized field in nostale filehandles	2024-04-03 15:28:20 +02:00
freevxfs	…
fscache	fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF	2024-09-12 11:11:27 +02:00
fuse	fuse: fix memory leak in fuse_create_open	2024-09-12 11:11:26 +02:00
gfs2	gfs2: Revert "Add quota_change type"	2024-09-08 07:54:46 +02:00
hfs	hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()	2024-08-03 08:54:15 +02:00
hfsplus	hfsplus: fix to avoid false alarm of circular locking	2024-08-03 08:53:21 +02:00
hostfs	hostfs: fix dev_t handling	2024-08-03 08:54:22 +02:00
hpfs	…
hugetlbfs	mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE	2024-02-23 09:25:16 +01:00
iomap	iomap: Fix iomap_adjust_read_range for plen calculation	2024-07-25 09:50:46 +02:00
isofs	isofs: handle CDs with bad root inode but good Joliet root directory	2024-04-13 13:07:34 +02:00
jbd2	jbd2: avoid mount failed when commit block is partial submitted	2024-09-12 11:11:37 +02:00
jffs2	jffs2: Fix potential illegal address access in jffs2_free_inode	2024-07-11 12:49:09 +02:00
jfs	jfs: define xtree root and page independently	2024-08-29 17:33:42 +02:00
kernfs	kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files	2024-08-29 17:33:33 +02:00
lockd	nfsd: stop setting ->pg_stats for unused stats	2024-08-19 06:04:23 +02:00
minix	…
netfs	netfs: Only call folio_start_fscache() one time for each folio	2023-09-18 12:03:46 -07:00
nfs	NFS: Avoid unnecessary rescanning of the per-server delegation list	2024-09-18 19:24:06 +02:00
nfs_common	…
nfsd	NFSD: simplify error paths in nfsd_svc()	2024-08-29 17:33:58 +02:00
nilfs2	nilfs2: fix state management in error path of log writing function	2024-09-12 11:11:28 +02:00
nls	…
notify	fsnotify: clear PARENT_WATCHED flags lazily	2024-09-08 07:54:44 +02:00
ntfs	…
ntfs3	fs/ntfs3: Check more cases when directory is corrupted	2024-09-12 11:11:37 +02:00
ocfs2	ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()	2024-09-30 16:25:12 +02:00
omfs	…
openpromfs	openpromfs: finish conversion to the new mount API	2024-06-12 11:11:30 +02:00
orangefs	orangefs: fix out-of-bounds fsid access	2024-07-11 12:49:08 +02:00
overlayfs	ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err	2024-09-04 13:28:23 +02:00
proc	sysctl: always initialize i_uid/i_gid	2024-08-11 12:47:13 +02:00
pstore	pstore/zone: Add a null pointer check to the psz_kmsg_read	2024-04-13 13:07:31 +02:00
qnx4	…
qnx6	…
quota	quota: Remove BUG_ON from dqget()	2024-08-29 17:33:33 +02:00
ramfs	…
reiserfs	reiserfs: fix uninit-value in comp_keys	2024-08-19 06:04:26 +02:00
romfs	fs: Convert to bdev_open_by_dev()	2024-08-19 06:04:25 +02:00
smb	smb: client: fix hang in wait_for_response() for negproto	2024-09-30 16:25:11 +02:00
squashfs	Squashfs: sanity check symbolic link size	2024-09-12 11:11:39 +02:00
sysfs	fs: sysfs: Fix reference leak in sysfs_break_active_protection()	2024-04-27 17:11:41 +02:00
sysv	sysv: don't call sb_bread() with pointers_lock held	2024-04-13 13:07:34 +02:00
tracefs	eventfs: Use list_del_rcu() for SRCU protected list variable	2024-09-12 11:11:27 +02:00
ubifs	ubifs: Set page uptodate in the correct place	2024-04-03 15:28:20 +02:00
udf	udf: Avoid excessive partition lengths	2024-09-12 11:11:30 +02:00
ufs	…
unicode	…
vboxsf	vboxsf: explicitly deny setlease attempts	2024-05-17 12:02:13 +02:00
verity	fsverity: use register_sysctl_init() to avoid kmemleak warning	2024-06-16 13:47:33 +02:00
xfs	xfs: fix log recovery buffer allocation for the legacy h_size fixup	2024-08-14 13:59:03 +02:00
zonefs	zonefs: Improve error handling	2024-02-23 09:25:13 +01:00
Kconfig	…
Kconfig.binfmt	…
Makefile	…
aio.c	fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion	2024-04-03 15:28:44 +02:00
anon_inodes.c	…
attr.c	…
bad_inode.c	…
binfmt_elf.c	ELF: fix kernel.randomize_va_space double read	2024-09-12 11:11:29 +02:00
binfmt_elf_fdpic.c	fs: binfmt_elf_efpic: don't use missing interpreter's properties	2024-08-29 17:33:33 +02:00
binfmt_elf_test.c	…
binfmt_flat.c	binfmt_flat: Fix corruption when not offsetting data start	2024-08-19 06:04:30 +02:00
binfmt_misc.c	binfmt_misc: cleanup on filesystem umount	2024-08-29 17:33:27 +02:00
binfmt_script.c	…
buffer.c	ext4: sanity check for NULL pointer after ext4_force_shutdown	2024-08-19 06:04:29 +02:00
char_dev.c	…
compat_binfmt_elf.c	…
coredump.c	…
d_path.c	…
dax.c	mm: convert DAX lock/unlock page to lock/unlock folio	2024-01-10 17:16:53 +01:00
dcache.c	fs: better handle deep ancestor chains in is_subdir()	2024-07-25 09:50:54 +02:00
direct-io.c	…
drop_caches.c	…
eventfd.c	…
eventpoll.c	epoll: be better about file lifetimes	2024-06-12 11:11:30 +02:00
exec.c	exec: Fix ToCToU between perm check and set-uid/gid usage	2024-08-19 06:04:22 +02:00
fcntl.c	fs: Fix rw_hint validation	2024-03-26 18:19:17 -04:00
fhandle.c	fs: Annotate struct file_handle with __counted_by() and use struct_size()	2024-08-19 06:04:28 +02:00
file.c	fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE	2024-08-29 17:33:14 +02:00
file_table.c	…
filesystems.c	…
fs-writeback.c	fs/writeback: bail out if there is no more inodes for IO and queued once	2024-06-27 13:49:00 +02:00
fs_context.c	fs: factor out vfs_parse_monolithic_sep() helper	2023-10-12 18:53:36 +03:00
fs_parser.c	…
fs_pin.c	…
fs_struct.c	…
fs_types.c	…
fsopen.c	…
init.c	…
inode.c	vfs: Don't evict inode under the inode lru traversing context	2024-08-29 17:33:13 +02:00
internal.h	…
ioctl.c	lsm: new security_file_ioctl_compat() hook	2024-01-31 16:18:54 -08:00
kernel_read_file.c	…
libfs.c	fs: new accessor methods for atime and mtime	2024-01-05 15:19:40 +01:00
locks.c	filelock: Fix fcntl/close race recovery compat path	2024-07-27 11:34:10 +02:00
mbcache.c	…
mnt_idmapping.c	…
mount.h	…
mpage.c	…
namei.c	rename(): fix the locking of subdirectories	2024-01-31 16:18:57 -08:00
namespace.c	mount: handle OOM on mnt_warn_timestamp_expiry	2024-10-04 16:28:51 +02:00
nsfs.c	…
open.c	ftruncate: pass a signed offset	2024-07-05 09:34:04 +02:00
pipe.c	fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()	2024-04-10 16:35:57 +02:00
pnode.c	…
pnode.h	…
posix_acl.c	…
proc_namespace.c	…
read_write.c	…
readdir.c	…
remap_range.c	…
select.c	fs/select: rework stack allocation hack for clang	2024-03-26 18:19:17 -04:00
seq_file.c	…
signalfd.c	…
splice.c	…
stack.c	…
stat.c	fs: Pass AT_GETATTR_NOSEC flag to getattr interface function	2023-12-03 07:33:03 +01:00
statfs.c	…
super.c	fs: Convert to bdev_open_by_dev()	2024-08-19 06:04:25 +02:00
sync.c	…
sysctls.c	…
timerfd.c	…
userfaultfd.c	Fix userfaultfd_api to return EINVAL as expected	2024-07-18 13:21:22 +02:00
utimes.c	…
xattr.c	vfs: Fix potential circular locking through setxattr() and removexattr()	2024-09-12 11:11:38 +02:00