1 From 621af425a7e8a9c900edeacbe112c3d4d6ea2de3 Mon Sep 17 00:00:00 2001
2 From: =?UTF-8?q?Ernesto=20A=2E=20Fern=C3=A1ndez?=
3 <ernesto.mnd.fernandez@gmail.com>
4 Date: Tue, 30 Oct 2018 15:06:07 -0700
5 Subject: hfs: prevent btree data loss on root split
7 Content-Type: text/plain; charset=UTF-8
8 Content-Transfer-Encoding: 8bit
10 [ Upstream commit d057c036672f33d43a5f7344acbb08cf3a8a0c09 ]
12 This bug is triggered whenever hfs_brec_update_parent() needs to split
13 the root node. The height of the btree is not increased, which leaves
14 the new node orphaned and its records lost. It is not possible for this
15 to happen on a valid hfs filesystem because the index nodes have fixed
18 For reasons I ignore, the hfs module does have support for a number of
19 hfsplus features. A corrupt btree header may report variable length
20 keys and trigger this bug, so it's better to fix it.
22 Link: http://lkml.kernel.org/r/9750b1415685c4adca10766895f6d5ef12babdb0.1535682463.git.ernesto.mnd.fernandez@gmail.com
23 Signed-off-by: Ernesto A. Fernández <ernesto.mnd.fernandez@gmail.com>
24 Cc: Christoph Hellwig <hch@infradead.org>
25 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
26 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
27 Signed-off-by: Sasha Levin <sashal@kernel.org>
29 fs/hfs/brec.c | 4 ++++
30 1 file changed, 4 insertions(+)
32 diff --git a/fs/hfs/brec.c b/fs/hfs/brec.c
33 index 2a6f3c67cb3f..2e713673df42 100644
36 @@ -424,6 +424,10 @@ skip:
40 + if (!new_node->parent) {
41 + hfs_btree_inc_height(tree);
42 + new_node->parent = tree->root;
44 fd->bnode = hfs_bnode_find(tree, new_node->parent);
45 /* create index key and entry */
46 hfs_bnode_read_key(new_node, fd->search_key, 14);