Messages in this thread | | | Subject | Re: [PATCH] f2fs: add a condition to detect overflow in f2fs_ioc_gc_range() | From | Chao Yu <> | Date | Tue, 17 Sep 2019 14:18:22 +0800 |
| |
On 2019/9/17 12:49, Sahitya Tummala wrote: > end = range.start + range.len; > > If the range.start/range.len is a very large value, then end can overflow > in this operation. It results into a crash in get_valid_blocks() when > accessing the invalid range.start segno. > > This issue is reported in ioctl fuzz testing. > > Signed-off-by: Sahitya Tummala <stummala@codeaurora.org>
Reviewed-by: Chao Yu <yuchao0@huawei.com>
Thanks,
| |