diff options
| author | Prince Kumar Maurya <princekumarmaurya06@gmail.com> | 2023-05-31 04:31:41 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2023-08-11 13:08:23 +0300 |
| commit | 1416eebaad80bdc85ad9f97f27242011b031e2a9 (patch) | |
| tree | e8296f03dc422a791074aa1d250de80ffb6a6a97 /fs/sysv | |
| parent | ccc6de4d4f3466fb70f17aea4e41b43742b6a979 (diff) | |
| download | linux-1416eebaad80bdc85ad9f97f27242011b031e2a9.tar.xz | |
fs/sysv: Null check to prevent null-ptr-deref bug
commit ea2b62f305893992156a798f665847e0663c9f41 upstream.
sb_getblk(inode->i_sb, parent) return a null ptr and taking lock on
that leads to the null-ptr-deref bug.
Reported-by: syzbot+aad58150cbc64ba41bdc@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=aad58150cbc64ba41bdc
Signed-off-by: Prince Kumar Maurya <princekumarmaurya06@gmail.com>
Message-Id: <20230531013141.19487-1-princekumarmaurya06@gmail.com>
Signed-off-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs/sysv')
| -rw-r--r-- | fs/sysv/itree.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/fs/sysv/itree.c b/fs/sysv/itree.c index 3b8567564e7e..9925cfe57159 100644 --- a/fs/sysv/itree.c +++ b/fs/sysv/itree.c @@ -145,6 +145,10 @@ static int alloc_branch(struct inode *inode, */ parent = block_to_cpu(SYSV_SB(inode->i_sb), branch[n-1].key); bh = sb_getblk(inode->i_sb, parent); + if (!bh) { + sysv_free_block(inode->i_sb, branch[n].key); + break; + } lock_buffer(bh); memset(bh->b_data, 0, blocksize); branch[n].bh = bh; |