Phillip Lougher 12427de943 Squashfs: fix variable overflow triggered by sysbot ...

Sysbot reports a slab out of bounds write in squashfs_readahead().

This is ultimately caused by a file reporting an (infeasibly) large file
size (1407374883553280 bytes) with the minimum block size of 4K.

This causes variable overflow.

Link: https://lkml.kernel.org/r/20231113160901.6444-1-phillip@squashfs.org.uk
Signed-off-by: Phillip Lougher <phillip@squashfs.org.uk>
Reported-by: syzbot+604424eb051c2f696163@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/all/000000000000b1fda20609ede0d1@google.com/
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>

2023-12-10 17:21:26 -08:00

..

block.c

squashfs: squashfs_read_data need to check if the length is 0

2023-12-06 16:12:45 -08:00

cache.c

…

decompressor_multi_percpu.c

squashfs: don't include buffer_head.h

2023-06-09 17:44:14 -07:00

decompressor_multi.c

squashfs: allows users to configure the number of decompression threads

2022-11-18 13:55:08 -08:00

decompressor_single.c

squashfs: add the mount parameter theads=<single|multi|percpu>

2022-11-18 13:55:08 -08:00

decompressor.c

squashfs: don't include buffer_head.h

2023-06-09 17:44:14 -07:00

decompressor.h

…

dir.c

…

export.c

exportfs: make ->encode_fh() a mandatory method for NFS export

2023-10-28 16:15:15 +02:00

file_cache.c

…

file_direct.c

Squashfs: fix variable overflow triggered by sysbot

2023-12-10 17:21:26 -08:00

file.c

Squashfs: fix variable overflow triggered by sysbot

2023-12-10 17:21:26 -08:00

fragment.c

…

id.c

…

inode.c

squashfs: convert to new timestamp accessors

2023-10-18 14:08:27 +02:00

Kconfig

squashfs: allows users to configure the number of decompression threads

2022-11-18 13:55:08 -08:00

lz4_wrapper.c

…

lzo_wrapper.c

…

Makefile

squashfs: always build "file direct" version of page actor

2022-07-29 18:12:34 -07:00

namei.c

…

page_actor.c

squashfs: fix read regression introduced in readahead code

2022-10-28 13:37:21 -07:00

page_actor.h

squashfs: fix read regression introduced in readahead code

2022-10-28 13:37:21 -07:00

squashfs_fs_i.h

…

squashfs_fs_sb.h

squashfs: cache partial compressed blocks

2023-06-09 17:44:14 -07:00

squashfs_fs.h

Squashfs: fix handling and sanity checking of xattr_ids count

2023-01-31 16:44:10 -08:00

squashfs.h

squashfs: move squashfs_xattr_handlers to .rodata

2023-10-10 13:49:20 +02:00

super.c

squashfs: cache partial compressed blocks

2023-06-09 17:44:14 -07:00

symlink.c

…

xattr_id.c

revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"

2023-02-03 17:52:25 -08:00

xattr.c

squashfs: move squashfs_xattr_handlers to .rodata

2023-10-10 13:49:20 +02:00

xattr.h

Squashfs: fix handling and sanity checking of xattr_ids count

2023-01-31 16:44:10 -08:00

xz_wrapper.c

…

zlib_wrapper.c

…

zstd_wrapper.c

…