Theodore Ts'o 9058e11caf ext4: add more paranoia checking in ext4_expand_extra_isize handling ...

commit 4ea99936a1630f51fc3a2d61a58ec4a1c4b7d55a upstream.

It's possible to specify a non-zero s_want_extra_isize via debugging
option, and this can cause bad things(tm) to happen when using a file
system with an inode size of 128 bytes.

Add better checking when the file system is mounted, as well as when
we are actually doing the trying to do the inode expansion.

Link: https://lore.kernel.org/r/20191110121510.GH23325@mit.edu
Reported-by: syzbot+f8d6f8386ceacdbfff57@syzkaller.appspotmail.com
Reported-by: syzbot+33d7ea72e47de3bdf4e1@syzkaller.appspotmail.com
Reported-by: syzbot+44b6763edfc17144296f@syzkaller.appspotmail.com
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
[bwh: Backported to 4.4: adjust context]
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-01-23 08:18:36 +01:00

..

acl.c

ext4: Don't clear SGID when inheriting ACLs

2017-10-12 11:27:35 +02:00

acl.h

…

balloc.c

ext4: check for allocation block validity with block group locked

2018-08-06 16:24:40 +02:00

bitmap.c

…

block_validity.c

ext4: call out CRC and corruption errors with specific error codes

2015-10-17 16:16:04 -04:00

crypto_fname.c

fscrypt: avoid collisions when presenting long encrypted filenames

2017-05-25 14:30:11 +02:00

crypto_key.c

fscrypt: lock mutex before checking for bounce page pool

2017-11-30 08:37:25 +00:00

crypto_policy.c

fscrypt: don't set policy for a dead directory

2019-07-21 09:07:10 +02:00

crypto.c

ext4 crypto: don't let data integrity writebacks fail with ENOMEM

2017-05-25 14:30:11 +02:00

dir.c

ext4: check for directory entries too close to block end

2020-01-04 13:34:22 +01:00

ext4_crypto.h

fscrypt: remove broken support for detecting keyring key revocation

2017-03-31 09:49:54 +02:00

ext4_extents.h

ext4: verify the depth of extent tree in ext4_find_extent()

2018-07-11 16:03:48 +02:00

ext4_jbd2.c

ext4: fix potential use after free in __ext4_journal_stop

2015-10-17 22:57:06 -04:00

ext4_jbd2.h

ext4: fix NULL pointer dereference while journal is aborted

2019-04-03 06:23:15 +02:00

ext4.h

ext4: avoid running out of journal credits when appending to an inline file

2018-11-21 09:27:36 +01:00

extents_status.c

ext4: move procfs registration code to fs/ext4/sysfs.c

2015-09-23 12:46:17 -04:00

extents_status.h

ext4: move procfs registration code to fs/ext4/sysfs.c

2015-09-23 12:46:17 -04:00

extents.c

ext4: zero out the unused memory region in the extent tree block

2019-06-11 12:23:42 +02:00

file.c

ext4: fix data corruption caused by unaligned direct AIO

2019-04-03 06:23:15 +02:00

fsync.c

…

hash.c

…

ialloc.c

ext4: fix check to prevent initializing reserved inodes

2018-08-15 17:42:04 +02:00

indirect.c

ext4: cleanup bh release code in ext4_ind_remove_space()

2019-04-27 09:33:47 +02:00

inline.c

ext4: fix a potential fiemap/page fault deadlock w/ inline_data

2019-01-16 22:16:12 +01:00

inode.c

ext4: add more paranoia checking in ext4_expand_extra_isize handling

2020-01-23 08:18:36 +01:00

ioctl.c

ext4: actually request zeroing of inode table after grow

2019-06-11 12:23:38 +02:00

Kconfig

ext4: Update EXT4_USE_FOR_EXT2 description

2015-09-24 13:27:47 +02:00

Makefile

ext4: move sysfs code from super.c to fs/ext4/sysfs.c

2015-09-23 12:44:17 -04:00

mballoc.c

ext4: fix spectre gadget in ext4_mb_regular_allocator()

2018-08-24 13:27:00 +02:00

mballoc.h

…

migrate.c

ext4: clean up feature test macros with predicate functions

2015-10-17 16:18:43 -04:00

mmp.c

ext4: don't mark mmp buffer head dirty

2018-09-29 03:08:54 -07:00

move_extent.c

ext4: fix argument checking in EXT4_IOC_MOVE_EXT

2018-11-21 09:27:33 +01:00

namei.c

ext4: work around deleting a file with i_nlink == 0 safely

2020-01-04 13:34:36 +01:00

page-io.c

ext4 crypto: fix some error handling

2017-05-25 14:30:11 +02:00

readpage.c

ext4 crypto: don't let data integrity writebacks fail with ENOMEM

2017-05-25 14:30:11 +02:00

resize.c

ext4: report real fs size after failed resize

2019-04-27 09:33:56 +02:00

super.c

ext4: add more paranoia checking in ext4_expand_extra_isize handling

2020-01-23 08:18:36 +01:00

symlink.c

don't put symlink bodies in pagecache into highmem

2018-02-16 20:09:38 +01:00

sysfs.c

ext4: sysfs: print ext4_super_block fields as little-endian

2018-09-05 09:18:38 +02:00

truncate.h

ext4: fix races between page faults and hole punching

2016-05-04 14:48:53 -07:00

xattr_security.c

xattr handlers: Pass handler to operations instead of flags

2015-11-13 20:34:32 -05:00

xattr_trusted.c

xattr handlers: Pass handler to operations instead of flags

2015-11-13 20:34:32 -05:00

xattr_user.c

xattr handlers: Pass handler to operations instead of flags

2015-11-13 20:34:32 -05:00

xattr.c

ext4: fix buffer leak in ext4_xattr_move_to_block() on error path

2018-11-21 09:27:43 +01:00

xattr.h

ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()

2018-04-24 09:32:10 +02:00