summaryrefslogtreecommitdiffstats
path: root/fs/f2fs
diff options
context:
space:
mode:
authorChao Yu <chao@kernel.org>2021-12-06 22:44:21 +0800
committerJaegeuk Kim <jaegeuk@kernel.org>2021-12-10 15:48:33 -0800
commit77900c45ee5cd5da63bd4d818a41dbdf367e81cd (patch)
tree48ea8d06618ffb54b87dd5b02407ccc258d04bbb /fs/f2fs
parentf6db43076d190d9bf75559dec28e18b9d12e4ce5 (diff)
downloadlinux-77900c45ee5cd5da63bd4d818a41dbdf367e81cd.tar.gz
linux-77900c45ee5cd5da63bd4d818a41dbdf367e81cd.tar.bz2
linux-77900c45ee5cd5da63bd4d818a41dbdf367e81cd.zip
f2fs: fix to do sanity check in is_alive()
In fuzzed image, SSA table may indicate that a data block belongs to invalid node, which node ID is out-of-range (0, 1, 2 or max_nid), in order to avoid migrating inconsistent data in such corrupted image, let's do sanity check anyway before data block migration. Cc: stable@vger.kernel.org Signed-off-by: Chao Yu <chao@kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Diffstat (limited to 'fs/f2fs')
-rw-r--r--fs/f2fs/gc.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/fs/f2fs/gc.c b/fs/f2fs/gc.c
index 3e64b234df21..b538cbcba351 100644
--- a/fs/f2fs/gc.c
+++ b/fs/f2fs/gc.c
@@ -1026,6 +1026,9 @@ static bool is_alive(struct f2fs_sb_info *sbi, struct f2fs_summary *sum,
set_sbi_flag(sbi, SBI_NEED_FSCK);
}
+ if (f2fs_check_nid_range(sbi, dni->ino))
+ return false;
+
*nofs = ofs_of_node(node_page);
source_blkaddr = data_blkaddr(NULL, node_page, ofs_in_node);
f2fs_put_page(node_page, 1);