[Linux-kernel-mentees] [PATCH] hfs, hfsplus: Fix NULL pointer dereference in hfs_find_init()
yepeilin.cs at gmail.com
Wed Aug 12 17:23:35 UTC 2020
On Wed, Aug 12, 2020 at 11:59:04AM +0300, Dan Carpenter wrote:
> Yeah, the patch doesn't work at all. I looked at one call tree and it
> hfs_mdb_get() tries to allocate HFS_SB(sb)->ext_tree.
> HFS_SB(sb)->ext_tree = hfs_btree_open(sb, HFS_EXT_CNID, hfs_ext_keycmp);
> hfs_btree_open() calls page = read_mapping_page(mapping, 0, NULL);
> read_mapping_page() calls mapping->a_ops->readpage() which leads to
> hfs_readpage() which leads to hfs_ext_read_extent() which calls
> res = hfs_find_init(HFS_SB(inode->i_sb)->ext_tree, &fd);
Thank you for pointing this out! I will try to come up with a better way
to fix it.
> So we need ->ext_tree to be non-NULL before we can set ->ext_tree to be
> non-NULL... :/
> I wonder how long this has been broken and if we should just delete the
> AFS file system.
> dan carpenter
More information about the Linux-kernel-mentees