Roman Smirnov 12ce9c96b1 udf: prevent integer overflow in udf_bitmap_free_blocks() ...

[ Upstream commit 56e69e59751d20993f243fb7dd6991c4e522424c ]

An overflow may occur if the function is called with the last
block and an offset greater than zero. It is necessary to add
a check to avoid this.

Found by Linux Verification Center (linuxtesting.org) with Svace.

[JK: Make test cover also unalloc table freeing]

Link: https://patch.msgid.link/20240620072413.7448-1-r.smirnov@omp.ru
Suggested-by: Jan Kara <jack@suse.com>
Signed-off-by: Roman Smirnov <r.smirnov@omp.ru>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 097420e48e30f51e8f4f650b5c946f5af63ec1a3)
Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>

2024-10-10 10:27:28 +00:00

..

balloc.c

udf: prevent integer overflow in udf_bitmap_free_blocks()

2024-10-10 10:27:28 +00:00

dir.c

block,fs: untangle fs.h and blk_types.h

2016-11-01 09:43:26 -06:00

directory.c

udf: Fix signed/unsigned format specifiers

2024-10-10 10:27:28 +00:00

ecma_167.h

udf: use __packed instead of __attribute__ ((packed))

2017-01-10 11:29:11 +01:00

file.c

udf: Do not update file length for failed writes to inline files

2023-03-11 16:26:45 +01:00

ialloc.c

fs: Replace current_fs_time() with current_time()

2016-09-27 21:06:22 -04:00

inode.c

udf: Fix signed/unsigned format specifiers

2024-10-10 10:27:28 +00:00

Kconfig

…

lowlevel.c

udf: atomically read inode size

2017-01-10 11:57:34 +01:00

Makefile

…

misc.c

udf: Fix signed/unsigned format specifiers

2024-10-10 10:27:28 +00:00

namei.c

udf: Fix signed/unsigned format specifiers

2024-10-10 10:27:28 +00:00

osta_udf.h

udf: use __packed instead of __attribute__ ((packed))

2017-01-10 11:29:11 +01:00

partition.c

udf: Fix signed/unsigned format specifiers

2024-10-10 10:27:28 +00:00

super.c

udf: Fix signed/unsigned format specifiers

2024-10-10 10:27:28 +00:00

symlink.c

statx: Add a system call to make enhanced file info available

2017-03-02 20:51:15 -05:00

truncate.c

udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size

2023-01-18 09:26:06 +01:00

udf_i.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udf_sb.h

udf: Define EFSCORRUPTED error code

2023-03-11 16:26:41 +01:00

udfdecl.h

udf: Simplify calls to udf_disk_stamp_to_time

2024-08-08 15:52:18 +00:00

udfend.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udftime.c

udf: udftime: prevent overflow in udf_disk_stamp_to_time()

2024-08-08 15:52:18 +00:00

unicode.c

udf: Fix signed/unsigned format specifiers

2024-10-10 10:27:28 +00:00