]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
authorJunrui Luo <moonafterrain@outlook.com>
Thu, 16 Apr 2026 03:39:56 +0000 (11:39 +0800)
committerYu Kuai <yukuai@fnnas.com>
Tue, 28 Apr 2026 12:44:37 +0000 (20:44 +0800)
commit9aa6d860b0930e2f72795665c42c44252a558a0c
tree7552873fd79961f212561eaed7979d527a2134d5
parentf7b24c7b41f23b5f9caa8b913afe79cd4c397d39
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies

setup_geo() extracts near_copies (nc) and far_copies (fc) from the
user-provided layout parameter without checking for zero. When fc=0
with the "improved" far set layout selected, 'geo->far_set_size =
disks / fc' triggers a divide-by-zero.

Validate nc and fc immediately after extraction, returning -1 if
either is zero.

Fixes: 475901aff158 ("MD RAID10: Improve redundancy for 'far' and 'offset' algorithms (part 1)")
Cc: stable@vger.kernel.org
Signed-off-by: Junrui Luo <moonafterrain@outlook.com>
Link: https://lore.kernel.org/linux-raid/SYBPR01MB7881A5E2556806CC1D318582AF232@SYBPR01MB7881.ausprd01.prod.outlook.com
Signed-off-by: Yu Kuai <yukuai@fnnas.com>
drivers/md/raid10.c