Haimin Zhang d925b7e78b jfs: prevent NULL deref in diFree ... [ Upstream commit a530462910 ] Add validation check for JFS_IP(ipimap)->i_imap to prevent a NULL deref in diFree since diFree uses it without do any validations. When function jfs_mount calls diMount to initialize fileset inode allocation map, it can fail and JFS_IP(ipimap)->i_imap won't be initialized. Then it calls diFreeSpecial to close fileset inode allocation map inode and it will flow into jfs_evict_inode. Function jfs_evict_inode just validates JFS_SBI(inode->i_sb)->ipimap, then calls diFree. diFree use JFS_IP(ipimap)->i_imap directly, then it will cause a NULL deref. Reported-by: TCS Robot <tcs_robot@tencent.com> Signed-off-by: Haimin Zhang <tcs_kernel@tencent.com> Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-04-13 20:59:13 +02:00
..
Kconfig	docs: fix a couple of new broken references	2019-07-31 14:12:26 -06:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
acl.c	vfs: add rcu argument to ->get_acl() callback	2021-08-18 22:08:24 +02:00
file.c	jfs: convert to fileattr	2021-04-12 15:04:29 +02:00
inode.c	jfs: prevent NULL deref in diFree	2022-04-13 20:59:13 +02:00
ioctl.c	jfs: convert to fileattr	2021-04-12 15:04:29 +02:00
jfs_acl.h	vfs: add rcu argument to ->get_acl() callback	2021-08-18 22:08:24 +02:00
jfs_btree.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_debug.c	proc: convert everything to "struct proc_ops"	2020-02-04 03:05:26 +00:00
jfs_debug.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_dinode.h	jfs: Avoid field-overflowing memcpy()	2021-06-23 09:21:52 -05:00
jfs_discard.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_discard.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_dmap.c	jfs: fix divide error in dbNextAG	2022-04-08 14:23:51 +02:00
jfs_dmap.h	jfs: Fix array index bounds check in dbAdjTree	2020-11-13 16:03:07 -06:00
jfs_dtree.c	jfs: Replace zero-length array with flexible-array member	2020-03-09 15:18:51 -05:00
jfs_dtree.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_extent.c	jfs: delete duplicated words + other fixes	2020-11-13 13:36:00 -06:00
jfs_extent.h	jfs: delete duplicated words + other fixes	2020-11-13 13:36:00 -06:00
jfs_filsys.h	JFS: more checks for invalid superblock	2020-12-18 15:23:33 -06:00
jfs_imap.c	jfs: Avoid field-overflowing memcpy()	2021-06-23 09:21:52 -05:00
jfs_imap.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_incore.h	jfs: Avoid field-overflowing memcpy()	2021-06-23 09:21:52 -05:00
jfs_inode.c	inode: make init and permission helpers idmapped mount aware	2021-01-24 14:27:16 +01:00
jfs_inode.h	jfs: convert to fileattr	2021-04-12 15:04:29 +02:00
jfs_lock.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_logmgr.c	fs/jfs: Fix missing error code in lmLogInit()	2021-06-01 10:29:12 -05:00
jfs_logmgr.h	jfs: delete duplicated words + other fixes	2020-11-13 13:36:00 -06:00
jfs_metapage.c	fs: Introduce i_blocks_per_page	2020-09-21 08:59:26 -07:00
jfs_metapage.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_mount.c	JFS: fix memleak in jfs_mount	2021-11-18 19:16:48 +01:00
jfs_superblock.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_txnmgr.c	jfs: Remove trailing semicolon in macros	2021-05-21 10:36:22 -05:00
jfs_txnmgr.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_types.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_umount.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_unicode.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_unicode.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_uniupr.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
jfs_xattr.h	jfs: Replace zero-length array with flexible-array member	2020-03-09 15:18:51 -05:00
jfs_xtree.c	jfs: delete duplicated words + other fixes	2020-11-13 13:36:00 -06:00
jfs_xtree.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
namei.c	jfs: convert to fileattr	2021-04-12 15:04:29 +02:00
resize.c	block: move struct block_device to blk_types.h	2020-06-24 09:16:02 -06:00
super.c	jfs: Avoid field-overflowing memcpy()	2021-06-23 09:21:52 -05:00
symlink.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
xattr.c	acl: handle idmapped mounts	2021-01-24 14:27:17 +01:00