]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
exfat: fix uninit-value in __exfat_get_dentry_set
authorNamjae Jeon <linkinjeon@kernel.org>
Sat, 26 Oct 2024 04:06:15 +0000 (13:06 +0900)
committerNamjae Jeon <linkinjeon@kernel.org>
Mon, 25 Nov 2024 08:08:21 +0000 (17:08 +0900)
commit02dffe9ab092fc4c8800aee68cb7eafd37a980c4
tree2306a3537055b803d235a18465cc42809e574319
parent184fa506e392eb78364d9283c961217ff2c0617b
exfat: fix uninit-value in __exfat_get_dentry_set

There is no check if stream size and start_clu are invalid.
If start_clu is EOF cluster and stream size is 4096, It will
cause uninit value access. because ei->hint_femp.eidx could
be 128(if cluster size is 4K) and wrong hint will allocate
next cluster. and this cluster will be same with the cluster
that is allocated by exfat_extend_valid_size(). The previous
patch will check invalid start_clu, but for clarity, initialize
hint_femp.eidx to zero.

Cc: stable@vger.kernel.org
Reported-by: syzbot+01218003be74b5e1213a@syzkaller.appspotmail.com
Tested-by: syzbot+01218003be74b5e1213a@syzkaller.appspotmail.com
Reviewed-by: Yuezhang Mo <Yuezhang.Mo@sony.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
fs/exfat/namei.c