summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBob Copeland <me@bobcopeland.com>2008-08-15 00:43:59 +0200
committerBob Copeland <me@bobcopeland.com>2010-07-10 20:37:39 +0200
commit9442e54f433eff9b6fbd0836611df4c1919df370 (patch)
tree5740987b7a7fcb1511263435fbbf48cf15ff0814
parentomfs: check bounds on block numbers before passing to sb_bread (diff)
downloadlinux-9442e54f433eff9b6fbd0836611df4c1919df370.tar.xz
linux-9442e54f433eff9b6fbd0836611df4c1919df370.zip
omfs: refuse to mount if bitmap pointer is obviously wrong
If the free space bitmap pointer is corrupted such that it lies outside of the number of blocks in the filesystem, print a message and fail the mount so the user can fix it offline. Signed-off-by: Bob Copeland <me@bobcopeland.com>
-rw-r--r--fs/omfs/inode.c9
1 files changed, 9 insertions, 0 deletions
diff --git a/fs/omfs/inode.c b/fs/omfs/inode.c
index bd4bf753a63b..0af5d0af9f32 100644
--- a/fs/omfs/inode.c
+++ b/fs/omfs/inode.c
@@ -509,6 +509,15 @@ static int omfs_fill_super(struct super_block *sb, void *data, int silent)
goto out_brelse_bh2;
}
+ if (sbi->s_bitmap_ino != ~0ULL &&
+ sbi->s_bitmap_ino > sbi->s_num_blocks) {
+ printk(KERN_ERR "omfs: free space bitmap location is corrupt "
+ "(%llx, total blocks %llx)\n",
+ (unsigned long long) sbi->s_bitmap_ino,
+ (unsigned long long) sbi->s_num_blocks);
+ goto out_brelse_bh2;
+ }
+
ret = omfs_get_imap(sb);
if (ret)
goto out_brelse_bh2;