diff options
| author | Yuezhang Mo <Yuezhang.Mo@sony.com> | 2024-12-13 13:08:37 +0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-01-17 13:36:10 +0100 |
| commit | dc1d7afceb982e8f666e70a582e6b5aa806de063 (patch) | |
| tree | df926256da8da57cc8da2000d64fe2b514f1243c /fs/overlayfs/namei.c | |
| parent | 71f4123cf2c793b5ced7c74b06a44786dc2033ad (diff) | |
| download | linux-dc1d7afceb982e8f666e70a582e6b5aa806de063.tar.gz linux-dc1d7afceb982e8f666e70a582e6b5aa806de063.tar.bz2 linux-dc1d7afceb982e8f666e70a582e6b5aa806de063.zip | |
exfat: fix the infinite loop in exfat_readdir()
[ Upstream commit fee873761bd978d077d8c55334b4966ac4cb7b59 ]
If the file system is corrupted so that a cluster is linked to
itself in the cluster chain, and there is an unused directory
entry in the cluster, 'dentry' will not be incremented, causing
condition 'dentry < max_dentries' unable to prevent an infinite
loop.
This infinite loop causes s_lock not to be released, and other
tasks will hang, such as exfat_sync_fs().
This commit stops traversing the cluster chain when there is unused
directory entry in the cluster to avoid this infinite loop.
Reported-by: syzbot+205c2644abdff9d3f9fc@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=205c2644abdff9d3f9fc
Tested-by: syzbot+205c2644abdff9d3f9fc@syzkaller.appspotmail.com
Fixes: ca06197382bd ("exfat: add directory operations")
Signed-off-by: Yuezhang Mo <Yuezhang.Mo@sony.com>
Reviewed-by: Sungjong Seo <sj1557.seo@samsung.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'fs/overlayfs/namei.c')
0 files changed, 0 insertions, 0 deletions