]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
affs: bound hash_pos before table lookup in affs_readdir
authorHyungjung Joo <jhj140711@gmail.com>
Fri, 13 Mar 2026 13:29:43 +0000 (22:29 +0900)
committerDavid Sterba <dsterba@suse.com>
Fri, 10 Apr 2026 00:51:05 +0000 (02:51 +0200)
commit6fa253b38b9b293a0de2a361de400557ca7666ca
treea32d105d40728fdcc23e9a990cd02288c5a30f8e
parentc369299895a591d96745d6492d4888259b004a9e
affs: bound hash_pos before table lookup in affs_readdir

affs_readdir() decodes ctx->pos into hash_pos and chain_pos and then
dereferences AFFS_HEAD(dir_bh)->table[hash_pos] before validating
that hash_pos is within the runtime table bound. Treat out-of-range
positions as end-of-directory before the first table lookup.

Signed-off-by: Hyungjung Joo <jhj140711@gmail.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
fs/affs/dir.c