]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
hfs: fix slab-out-of-bounds in hfs_bnode_read()
authorViacheslav Dubeyko <slava@dubeyko.com>
Thu, 3 Jul 2025 21:49:12 +0000 (14:49 -0700)
committerViacheslav Dubeyko <slava@dubeyko.com>
Fri, 25 Jul 2025 22:37:19 +0000 (15:37 -0700)
commita431930c9bac518bf99d6b1da526a7f37ddee8d8
treed86d3435232a2c8cc1578f0503cd630ac22360ff
parentc80aa2aaaa5e69d5219c6af8ef7e754114bd08d2
hfs: fix slab-out-of-bounds in hfs_bnode_read()

This patch introduces is_bnode_offset_valid() method that checks
the requested offset value. Also, it introduces
check_and_correct_requested_length() method that checks and
correct the requested length (if it is necessary). These methods
are used in hfs_bnode_read(), hfs_bnode_write(), hfs_bnode_clear(),
hfs_bnode_copy(), and hfs_bnode_move() with the goal to prevent
the access out of allocated memory and triggering the crash.

Signed-off-by: Viacheslav Dubeyko <slava@dubeyko.com>
Link: https://lore.kernel.org/r/20250703214912.244138-1-slava@dubeyko.com
Signed-off-by: Viacheslav Dubeyko <slava@dubeyko.com>
fs/hfs/bnode.c