• Jan Kara's avatar
    udf: Avoid using corrupted block bitmap buffer · a90d4471
    Jan Kara authored
    When the filesystem block bitmap is corrupted, we detect the corruption
    while loading the bitmap and fail the allocation with error. However the
    next allocation from the same bitmap will notice the bitmap buffer is
    already loaded and tries to allocate from the bitmap with mixed results
    (depending on the exact nature of the bitmap corruption). Fix the
    problem by using BH_verified bit to indicate whether the bitmap is valid
    or not.
    
    Reported-by: syzbot+5f682cd029581f9edfd1@syzkaller.appspotmail.com
    CC: stable@vger.kernel.org
    Link: https://patch.msgid.link/20240617154201.29512-2-jack@suse.cz
    Fixes: 1e0d4adf ("udf: Check consistency of Space Bitmap Descriptor")
    Signed-off-by: default avatarJan Kara <jack@suse.cz>
    a90d4471
balloc.c 19.2 KB