Files
kernel_amazon_mt8127-common/include/linux
Ryusuke Konishi c043edcc42 nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
commit d8fd150fe3935e1692bf57c66691e17409ebb9c1 upstream.

The range check for b-tree level parameter in nilfs_btree_root_broken()
is wrong; it accepts the case of "level == NILFS_BTREE_LEVEL_MAX" even
though the level is limited to values in the range of 0 to
(NILFS_BTREE_LEVEL_MAX - 1).

Since the level parameter is read from storage device and used to index
nilfs_btree_path array whose element count is NILFS_BTREE_LEVEL_MAX, it
can cause memory overrun during btree operations if the boundary value
is set to the level parameter on device.

This fixes the broken sanity check and adds a comment to clarify that
the upper bound NILFS_BTREE_LEVEL_MAX is exclusive.

Signed-off-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-05-17 09:51:32 -07:00
..
2013-05-17 14:31:05 -04:00
2015-04-29 10:33:54 +02:00
2013-12-04 10:56:22 -08:00
2013-05-07 19:46:02 -07:00
2013-12-08 07:29:27 -08:00
2014-10-30 09:35:12 -07:00
2014-11-14 08:47:55 -08:00
2013-07-28 16:30:11 -07:00
2013-05-07 18:38:27 -07:00
2013-10-13 16:08:28 -07:00
2014-04-03 12:01:05 -07:00
2014-06-26 15:12:38 -04:00
2013-07-28 16:30:05 -07:00
2013-10-13 16:08:35 -07:00
2015-04-29 10:34:00 +02:00
2013-07-21 18:21:29 -07:00
2014-01-15 15:28:47 -08:00
2013-05-04 14:47:26 -04:00
2014-02-13 13:47:59 -08:00
2013-08-20 08:43:02 -07:00
2013-07-28 16:29:55 -07:00