Ryusuke Konishi 8c07c55f33 nilfs2: reject invalid file types when reading inodes ...

commit 4aead50caf67e01020c8be1945c3201e8a972a27 upstream.

To prevent inodes with invalid file types from tripping through the vfs
and causing malfunctions or assertion failures, add a missing sanity check
when reading an inode from a block device.  If the file type is not valid,
treat it as a filesystem error.

Link: https://lkml.kernel.org/r/20250710134952.29862-1-konishi.ryusuke@gmail.com
Fixes: 05fe58fdc1 ("nilfs2: inode operations")
Signed-off-by: Ryusuke Konishi <konishi.ryusuke@gmail.com>
Reported-by: syzbot+895c23f6917da440ed0d@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?extid=895c23f6917da440ed0d
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>

2025-09-16 13:55:10 +02:00

..

alloc.c

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-18 11:39:36 +02:00

alloc.h

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-18 11:39:36 +02:00

bmap.c

nilfs2: fix infinite loop in nilfs_mdt_get_block()

2023-05-17 11:13:20 +02:00

bmap.h

…

btnode.c

nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

2024-12-05 10:59:28 +01:00

btnode.h

nilfs2: fix lockdep warnings in page operations for btree nodes

2022-05-25 09:10:37 +02:00

btree.c

nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()

2025-07-17 10:08:00 +02:00

btree.h

…

cpfile.c

nilfs2: use a more common logging style

2024-04-13 12:50:07 +02:00

cpfile.h

…

dat.c

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-18 11:39:36 +02:00

dat.h

…

dir.c

nilfs2: handle errors that nilfs_prepare_chunk() may return

2025-04-03 10:09:49 +02:00

direct.c

nilfs2: add pointer check for nilfs_direct_propagate()

2025-07-17 10:08:00 +02:00

direct.h

…

export.h

…

file.c

nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()

2024-02-23 08:12:58 +01:00

gcinode.c

nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

2024-12-05 10:59:28 +01:00

ifile.c

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-18 11:39:36 +02:00

ifile.h

…

inode.c

nilfs2: reject invalid file types when reading inodes

2025-09-16 13:55:10 +02:00

ioctl.c

nilfs2: fix out-of-range warning

2024-06-16 13:23:24 +02:00

Kconfig

…

Makefile

…

mdt.c

nilfs2: do not output warnings when clearing dirty buffers

2025-04-04 11:11:27 +02:00

mdt.h

nilfs2: fix lockdep warnings during disk space reclamation

2022-05-25 09:10:37 +02:00

namei.c

nilfs2: handle errors that nilfs_prepare_chunk() may return

2025-04-03 10:09:49 +02:00

nilfs.h

nilfs2: handle errors that nilfs_prepare_chunk() may return

2025-04-03 10:09:49 +02:00

page.c

nilfs2: do not force clear folio if buffer is referenced

2025-04-04 11:11:27 +02:00

page.h

nilfs2: do not output warnings when clearing dirty buffers

2025-04-04 11:11:27 +02:00

recovery.c

nilfs2: fix missing cleanup on rollforward recovery error

2024-09-12 11:02:51 +02:00

segbuf.c

nilfs2: use a more common logging style

2024-04-13 12:50:07 +02:00

segbuf.h

…

segment.c

nilfs2: protect access to buffers with no active references

2025-04-04 11:11:27 +02:00

segment.h

…

sufile.c

nilfs2: use a more common logging style

2024-04-13 12:50:07 +02:00

sufile.h

…

super.c

nilfs2: use a more common logging style

2024-04-13 12:50:07 +02:00

sysfs.c

nilfs2: protect references to superblock parameters exposed in sysfs

2024-09-12 11:02:55 +02:00

sysfs.h

…

the_nilfs.c

nilfs2: fix inode number range checks

2024-07-18 11:39:35 +02:00

the_nilfs.h

nilfs2: fix inode number range checks

2024-07-18 11:39:35 +02:00