diff options
author | Sahitya Tummala <stummala@codeaurora.org> | 2019-09-17 06:49:23 +0200 |
---|---|---|
committer | Jaegeuk Kim <jaegeuk@kernel.org> | 2019-09-17 22:56:15 +0200 |
commit | fbbf779989d2ef9a51daaa4e53c0b2ecc8c55c4e (patch) | |
tree | 2f12ef343c175b800765c41ba913dc430059e50f /fs/f2fs/f2fs.h | |
parent | f2fs: fix to add missing F2FS_IO_ALIGNED() condition (diff) | |
download | linux-fbbf779989d2ef9a51daaa4e53c0b2ecc8c55c4e.tar.xz linux-fbbf779989d2ef9a51daaa4e53c0b2ecc8c55c4e.zip |
f2fs: add a condition to detect overflow in f2fs_ioc_gc_range()
end = range.start + range.len;
If the range.start/range.len is a very large value, then end can overflow
in this operation. It results into a crash in get_valid_blocks() when
accessing the invalid range.start segno.
This issue is reported in ioctl fuzz testing.
Signed-off-by: Sahitya Tummala <stummala@codeaurora.org>
Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Diffstat (limited to 'fs/f2fs/f2fs.h')
0 files changed, 0 insertions, 0 deletions