提交 5cc5214d 编写于 作者: D Dave Kleikamp 提交者: Xie XiuQi

jfs: Fix array index bounds check in dbAdjTree

stable inclusion
from stable-5.10.4
commit c2032bf94ba4fb15db0c277614338d377fe430d2
bugzilla: 46903

--------------------------------

commit c61b3e48 upstream.

Bounds checking tools can flag a bug in dbAdjTree() for an array index
out of bounds in dmt_stree. Since dmt_stree can refer to the stree in
both structures dmaptree and dmapctl, use the larger array to eliminate
the false positive.
Signed-off-by: NDave Kleikamp <dave.kleikamp@oracle.com>
Reported-by: Nbutt3rflyh4ck <butterflyhuangxx@gmail.com>
Signed-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: NChen Jun <chenjun102@huawei.com>
Acked-by: NXie XiuQi <xiexiuqi@huawei.com>
上级 528dbc44
......@@ -183,7 +183,7 @@ typedef union dmtree {
#define dmt_leafidx t1.leafidx
#define dmt_height t1.height
#define dmt_budmin t1.budmin
#define dmt_stree t1.stree
#define dmt_stree t2.stree
/*
* on-disk aggregate disk allocation map descriptor.
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册