]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
jfs: nlink overflow in jfs_rename
authorJori Koolstra <jkoolstra@xs4all.nl>
Tue, 28 Oct 2025 12:22:12 +0000 (13:22 +0100)
committerDave Kleikamp <dave.kleikamp@oracle.com>
Tue, 2 Dec 2025 16:13:32 +0000 (10:13 -0600)
commit9218dc26fd922b09858ecd3666ed57dfd8098da8
treee9c4b81e538688bb1447c7dc7c31d8ba88a90901
parent4a26e7032d7d57c998598c08a034872d6f0d3945
jfs: nlink overflow in jfs_rename

If nlink is maximal for a directory (-1) and inside that directory you
perform a rename for some child directory (not moving from the parent),
then the nlink of the first directory is first incremented and later
decremented. Normally this is fine, but when nlink = -1 this causes a
wrap around to 0, and then drop_nlink issues a warning.

After applying the patch syzbot no longer issues any warnings. I also
ran some basic fs tests to look for any regressions.

Signed-off-by: Jori Koolstra <jkoolstra@xs4all.nl>
Reported-by: syzbot+9131ddfd7870623b719f@syzkaller.appspotmail.com
Closes: https://syzbot.org/bug?extid=9131ddfd7870623b719f
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
fs/jfs/namei.c