|
 |
e427d2 |
From 0111635ea5798f98665714e161c3c7746184a04b Mon Sep 17 00:00:00 2001
|
|
|
e427d2 |
From: Theodore Ts'o <tytso@mit.edu>
|
|
|
e427d2 |
Date: Tue, 23 Feb 2021 16:02:42 -0500
|
|
|
e427d2 |
Subject: [PATCH 21/46] Add checks for fs->blocksize == 0 which could cause
|
|
|
e427d2 |
some crashes
|
|
|
e427d2 |
Content-Type: text/plain
|
|
|
e427d2 |
|
|
|
e427d2 |
This should never happeb, but some checks is useful, and also fixes
|
|
|
e427d2 |
some Coverity warnings.
|
|
|
e427d2 |
|
|
|
e427d2 |
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
|
|
|
e427d2 |
Signed-off-by: Lukas Czerner <lczerner@redhat.com>
|
|
|
e427d2 |
---
|
|
|
e427d2 |
debugfs/do_journal.c | 2 --
|
|
|
e427d2 |
lib/ext2fs/csum.c | 3 +++
|
|
|
e427d2 |
lib/ext2fs/ext2_err.et.in | 3 +++
|
|
|
e427d2 |
lib/ext2fs/inode.c | 4 ++++
|
|
|
e427d2 |
misc/e2image.c | 5 +++--
|
|
|
e427d2 |
5 files changed, 13 insertions(+), 4 deletions(-)
|
|
|
e427d2 |
|
|
|
e427d2 |
diff --git a/debugfs/do_journal.c b/debugfs/do_journal.c
|
|
|
e427d2 |
index 5091a530..8261fa95 100644
|
|
|
e427d2 |
--- a/debugfs/do_journal.c
|
|
|
e427d2 |
+++ b/debugfs/do_journal.c
|
|
|
e427d2 |
@@ -528,8 +528,6 @@ static errcode_t journal_write(journal_t *journal,
|
|
|
e427d2 |
}
|
|
|
e427d2 |
|
|
|
e427d2 |
err = journal_close_trans(&trans);
|
|
|
e427d2 |
- if (err)
|
|
|
e427d2 |
- goto error;
|
|
|
e427d2 |
error:
|
|
|
e427d2 |
return err;
|
|
|
e427d2 |
}
|
|
|
e427d2 |
diff --git a/lib/ext2fs/csum.c b/lib/ext2fs/csum.c
|
|
|
e427d2 |
index 2151003b..28b3bb05 100644
|
|
|
e427d2 |
--- a/lib/ext2fs/csum.c
|
|
|
e427d2 |
+++ b/lib/ext2fs/csum.c
|
|
|
e427d2 |
@@ -263,6 +263,9 @@ static errcode_t __get_dirent_tail(ext2_filsys fs,
|
|
|
e427d2 |
errcode_t retval = 0;
|
|
|
e427d2 |
__u16 (*translate)(__u16) = (need_swab ? disk_to_host16 : do_nothing16);
|
|
|
e427d2 |
|
|
|
e427d2 |
+ if (fs->blocksize < 1024)
|
|
|
e427d2 |
+ return EXT2_FILSYS_CORRUPTED; /* Should never happen */
|
|
|
e427d2 |
+
|
|
|
e427d2 |
d = dirent;
|
|
|
e427d2 |
top = EXT2_DIRENT_TAIL(dirent, fs->blocksize);
|
|
|
e427d2 |
|
|
|
e427d2 |
diff --git a/lib/ext2fs/ext2_err.et.in b/lib/ext2fs/ext2_err.et.in
|
|
|
e427d2 |
index 0c76fee6..cf0e00ea 100644
|
|
|
e427d2 |
--- a/lib/ext2fs/ext2_err.et.in
|
|
|
e427d2 |
+++ b/lib/ext2fs/ext2_err.et.in
|
|
|
e427d2 |
@@ -548,4 +548,7 @@ ec EXT2_ET_EA_INODE_CORRUPTED,
|
|
|
e427d2 |
ec EXT2_ET_NO_GDESC,
|
|
|
e427d2 |
"Group descriptors not loaded"
|
|
|
e427d2 |
|
|
|
e427d2 |
+ec EXT2_FILSYS_CORRUPTED,
|
|
|
e427d2 |
+ "The internal ext2_filsys data structure appears to be corrupted"
|
|
|
e427d2 |
+
|
|
|
e427d2 |
end
|
|
|
e427d2 |
diff --git a/lib/ext2fs/inode.c b/lib/ext2fs/inode.c
|
|
|
e427d2 |
index c4377eeb..6f42882e 100644
|
|
|
e427d2 |
--- a/lib/ext2fs/inode.c
|
|
|
e427d2 |
+++ b/lib/ext2fs/inode.c
|
|
|
e427d2 |
@@ -144,6 +144,8 @@ errcode_t ext2fs_open_inode_scan(ext2_filsys fs, int buffer_blocks,
|
|
|
e427d2 |
errcode_t (*save_get_blocks)(ext2_filsys f, ext2_ino_t ino, blk_t *blocks);
|
|
|
e427d2 |
|
|
|
e427d2 |
EXT2_CHECK_MAGIC(fs, EXT2_ET_MAGIC_EXT2FS_FILSYS);
|
|
|
e427d2 |
+ if (fs->blocksize < 1024)
|
|
|
e427d2 |
+ return EXT2_FILSYS_CORRUPTED; /* Should never happen */
|
|
|
e427d2 |
|
|
|
e427d2 |
/*
|
|
|
e427d2 |
* If fs->badblocks isn't set, then set it --- since the inode
|
|
|
e427d2 |
@@ -764,6 +766,8 @@ errcode_t ext2fs_read_inode2(ext2_filsys fs, ext2_ino_t ino,
|
|
|
e427d2 |
int cache_slot, fail_csum;
|
|
|
e427d2 |
|
|
|
e427d2 |
EXT2_CHECK_MAGIC(fs, EXT2_ET_MAGIC_EXT2FS_FILSYS);
|
|
|
e427d2 |
+ if (fs->blocksize < 1024)
|
|
|
e427d2 |
+ return EXT2_FILSYS_CORRUPTED; /* Should never happen */
|
|
|
e427d2 |
|
|
|
e427d2 |
/* Check to see if user has an override function */
|
|
|
e427d2 |
if (fs->read_inode &&
|
|
|
e427d2 |
diff --git a/misc/e2image.c b/misc/e2image.c
|
|
|
e427d2 |
index 892c5371..195fabb2 100644
|
|
|
e427d2 |
--- a/misc/e2image.c
|
|
|
e427d2 |
+++ b/misc/e2image.c
|
|
|
e427d2 |
@@ -892,8 +892,9 @@ static errcode_t initialize_qcow2_image(int fd, ext2_filsys fs,
|
|
|
e427d2 |
int cluster_bits = get_bits_from_size(fs->blocksize);
|
|
|
e427d2 |
struct ext2_super_block *sb = fs->super;
|
|
|
e427d2 |
|
|
|
e427d2 |
- if (fs->blocksize < 1024)
|
|
|
e427d2 |
- return EINVAL; /* Can never happen, but just in case... */
|
|
|
e427d2 |
+ /* Sbould never happen, but just in case... */
|
|
|
e427d2 |
+ if (cluster_bits < 0)
|
|
|
e427d2 |
+ return EXT2_FILSYS_CORRUPTED;
|
|
|
e427d2 |
|
|
|
e427d2 |
/* Allocate header */
|
|
|
e427d2 |
ret = ext2fs_get_memzero(sizeof(struct ext2_qcow2_hdr), &header);
|
|
|
e427d2 |
--
|
|
|
e427d2 |
2.35.1
|
|
|
e427d2 |
|