Skip to content
Snippets Groups Projects
Commit a6b7c561 authored by Phillip Lougher's avatar Phillip Lougher Committed by Frieder Schrempf
Browse files

Squashfs: fix variable overflow triggered by sysbot

[ Upstream commit 12427de9 ]

Sysbot reports a slab out of bounds write in squashfs_readahead().

This is ultimately caused by a file reporting an (infeasibly) large file
size (1407374883553280 bytes) with the minimum block size of 4K.

This causes variable overflow.

Link: https://lkml.kernel.org/r/20231113160901.6444-1-phillip@squashfs.org.uk


Signed-off-by: default avatarPhillip Lougher <phillip@squashfs.org.uk>
Reported-by: default avatar <syzbot+604424eb051c2f696163@syzkaller.appspotmail.com>
Closes: https://lore.kernel.org/all/000000000000b1fda20609ede0d1@google.com/


Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent b5112a4b
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment