diff options
| author | Theodore Ts'o | 2023-04-29 16:14:46 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman | 2023-05-17 11:53:58 +0200 |
| commit | d87a4e4094c9879fc8acdff8ce59fdffa979c8e0 (patch) | |
| tree | 771ab2747480185575d9c0db70e526a322fdc06a /fs/reiserfs/fix_node.c | |
| parent | 19fb73b8eaefccc48918c2f915d021bd4a5572a7 (diff) | |
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
commit 463808f237cf73e98a1a45ff7460c2406a150a0b upstream.
If a malicious fuzzer overwrites the ext4 superblock while it is
mounted such that the s_first_data_block is set to a very large
number, the calculation of the block group can underflow, and trigger
a BUG_ON check. Change this to be an ext4_warning so that we don't
crash the kernel.
Cc: stable@kernel.org
Link: https://lore.kernel.org/r/20230430154311.579720-3-tytso@mit.edu
Reported-by: syzbot+e2efa3efc15a1c9e95c3@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?id=69b28112e098b070f639efb356393af3ffec4220
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs/reiserfs/fix_node.c')
0 files changed, 0 insertions, 0 deletions