]> git.ipfire.org Git - thirdparty/linux.git/commitdiff
xfs: sb_spino_align is not verified
authorDave Chinner <dchinner@redhat.com>
Thu, 24 Oct 2024 02:51:05 +0000 (13:51 +1100)
committerCarlos Maiolino <cem@kernel.org>
Tue, 5 Nov 2024 12:51:59 +0000 (13:51 +0100)
It's just read in from the superblock and used without doing any
validity checks at all on the value.

Fixes: fb4f2b4e5a82 ("xfs: add sparse inode chunk alignment superblock field")
Signed-off-by: Dave Chinner <dchinner@redhat.com>
Reviewed-by: Darrick J. Wong <djwong@kernel.org>
Signed-off-by: Carlos Maiolino <cem@kernel.org>
fs/xfs/libxfs/xfs_sb.c

index d95409f3cba6676fee7c76c25faa1e2d113c4e91..0d181bc140f027fa844112fca7524bbb5bb4b53b 100644 (file)
@@ -398,6 +398,20 @@ xfs_validate_sb_common(
                                         sbp->sb_inoalignmt, align);
                                return -EINVAL;
                        }
+
+                       if (!sbp->sb_spino_align ||
+                           sbp->sb_spino_align > sbp->sb_inoalignmt ||
+                           (sbp->sb_inoalignmt % sbp->sb_spino_align) != 0) {
+                               xfs_warn(mp,
+                               "Sparse inode alignment (%u) is invalid.",
+                                       sbp->sb_spino_align);
+                               return -EINVAL;
+                       }
+               } else if (sbp->sb_spino_align) {
+                       xfs_warn(mp,
+                               "Sparse inode alignment (%u) should be zero.",
+                               sbp->sb_spino_align);
+                       return -EINVAL;
                }
        } else if (sbp->sb_qflags & (XFS_PQUOTA_ENFD | XFS_GQUOTA_ENFD |
                                XFS_PQUOTA_CHKD | XFS_GQUOTA_CHKD)) {