• Jan Kara's avatar
    udf: Fix races with i_size changes during readpage · 9795e0e8
    Jan Kara authored
    __udf_adinicb_readpage() uses i_size several times. When truncate
    changes i_size while the function is running, it can observe several
    different values and thus e.g. expose uninitialized parts of page to
    userspace. Also use i_size_read() in the function since it does not hold
    inode_lock. Since i_size is guaranteed to be small, this cannot really
    cause any issues even on 32-bit archs but let's be careful.
    
    CC: stable@vger.kernel.org
    Fixes: 9c2fc0deSigned-off-by: default avatarJan Kara <jack@suse.cz>
    9795e0e8
file.c 6.93 KB