]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commitdiff
jfs: Fix array index bounds check in dbAdjTree
authorDave Kleikamp <dave.kleikamp@oracle.com>
Fri, 13 Nov 2020 20:58:46 +0000 (14:58 -0600)
committerDave Kleikamp <dave.kleikamp@oracle.com>
Fri, 13 Nov 2020 22:03:07 +0000 (16:03 -0600)
Bounds checking tools can flag a bug in dbAdjTree() for an array index
out of bounds in dmt_stree. Since dmt_stree can refer to the stree in
both structures dmaptree and dmapctl, use the larger array to eliminate
the false positive.

Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Reported-by: butt3rflyh4ck <butterflyhuangxx@gmail.com>
fs/jfs/jfs_dmap.h

index 29891fad3f09561bf8fbc6cd3f4b5d1faaaf57ca..aa03a904d5ab2527a5c28b9c855825ad015d6ca7 100644 (file)
@@ -183,7 +183,7 @@ typedef union dmtree {
 #define        dmt_leafidx     t1.leafidx
 #define        dmt_height      t1.height
 #define        dmt_budmin      t1.budmin
-#define        dmt_stree       t1.stree
+#define        dmt_stree       t2.stree
 
 /*
  *     on-disk aggregate disk allocation map descriptor.