Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

jfs: Fix array index bounds check in dbAdjTree

Bounds checking tools can flag a bug in dbAdjTree() for an array index
out of bounds in dmt_stree. Since dmt_stree can refer to the stree in
both structures dmaptree and dmapctl, use the larger array to eliminate
the false positive.

Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
Reported-by: butt3rflyh4ck <butterflyhuangxx@gmail.com>

+1 -1
+1 -1
fs/jfs/jfs_dmap.h
··· 183 183 #define dmt_leafidx t1.leafidx 184 184 #define dmt_height t1.height 185 185 #define dmt_budmin t1.budmin 186 - #define dmt_stree t1.stree 186 + #define dmt_stree t2.stree 187 187 188 188 /* 189 189 * on-disk aggregate disk allocation map descriptor.