Unverified Commit 876c3b68 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14876 *** jffs2: Prevent rtime decompress memory corruption *** 

Merge Pull Request from: @ci-robot 
 
PR sync from: Yongjian Sun <sunyongjian1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/FRTYGZIWIRW7HM4GQTSXTH6T24E6AKYI/ 
*** BLURB HERE ***

Kinsey Moore (1):
  [Backport] jffs2: Prevent rtime decompress memory corruption

Richard Weinberger (1):
  [Backport] jffs2: Fix rtime decompressor


-- 
2.39.2
 
https://gitee.com/src-openeuler/kernel/issues/IBHWWI 
 
Link:https://gitee.com/openeuler/kernel/pulls/14876

 

Reviewed-by: default avatarZhang Peng <zhangpeng362@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 9731a4c0 aadf96ea

fs/jffs2/compr_rtime.c

+3 −0
Original line number Diff line number Diff line
@@ -95,6 +95,9 @@ static int jffs2_rtime_decompress(unsigned char *data_in, 


		positions[value]=outpos;

		if (repeat) {

			if ((outpos + repeat) > destlen) {

				return 1;

			}

			if (backoffs + repeat >= outpos) {

				while(repeat) {

					cpage_out[outpos++] = cpage_out[backoffs++];