Unverified Commit 9ecc9b64 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!10378 fs/ntfs3: Add a check for attr_names and oatbl 

Merge Pull Request from: @ci-robot 
 
PR sync from: Yifan Qiao <qiaoyifan4@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/ZLNYTXWWK6LGERBYUIBV5NBQHES6UERC/ 
 
https://gitee.com/src-openeuler/kernel/issues/IAG8T5 
 
Link:https://gitee.com/openeuler/kernel/pulls/10378

 

Reviewed-by: default avatarZhang Peng <zhangpeng362@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 4fa87848 cc225902

fs/ntfs3/fslog.c

+32 −6
Original line number Diff line number Diff line
@@ -3722,6 +3722,8 @@ int log_replay(struct ntfs_inode *ni, bool *initialized) 


	u64 rec_lsn, checkpt_lsn = 0, rlsn = 0;

	struct ATTR_NAME_ENTRY *attr_names = NULL;

	u32 attr_names_bytes = 0;

	u32 oatbl_bytes = 0;

	struct RESTART_TABLE *dptbl = NULL;

	struct RESTART_TABLE *trtbl = NULL;

	const struct RESTART_TABLE *rt;
@@ -3736,6 +3738,7 @@ int log_replay(struct ntfs_inode *ni, bool *initialized) 
	struct NTFS_RESTART *rst = NULL;

	struct lcb *lcb = NULL;

	struct OPEN_ATTR_ENRTY *oe;

	struct ATTR_NAME_ENTRY *ane;

	struct TRANSACTION_ENTRY *tr;

	struct DIR_PAGE_ENTRY *dp;

	u32 i, bytes_per_attr_entry;
@@ -4314,17 +4317,40 @@ int log_replay(struct ntfs_inode *ni, bool *initialized) 
	lcb = NULL;



check_attribute_names2:

	if (rst->attr_names_len && oatbl) {

		struct ATTR_NAME_ENTRY *ane = attr_names;

		while (ane->off) {

	if (attr_names && oatbl) {

		off = 0;

		for (;;) {

			/* Check we can use attribute name entry 'ane'. */

			static_assert(sizeof(*ane) == 4);

			if (off + sizeof(*ane) > attr_names_bytes) {

				/* just ignore the rest. */

				break;

			}



			ane = Add2Ptr(attr_names, off);

			t16 = le16_to_cpu(ane->off);

			if (!t16) {

				/* this is the only valid exit. */

				break;

			}



			/* Check we can use open attribute entry 'oe'. */

			if (t16 + sizeof(*oe) > oatbl_bytes) {

				/* just ignore the rest. */

				break;

			}



			/* TODO: Clear table on exit! */

			oe = Add2Ptr(oatbl, le16_to_cpu(ane->off));

			oe = Add2Ptr(oatbl, t16);

			t16 = le16_to_cpu(ane->name_bytes);

			off += t16 + sizeof(*ane);

			if (off > attr_names_bytes) {

				/* just ignore the rest. */

				break;

			}

			oe->name_len = t16 / sizeof(short);

			oe->ptr = ane->name;

			oe->is_attr_name = 2;

			ane = Add2Ptr(ane,

				      sizeof(struct ATTR_NAME_ENTRY) + t16);

		}

	}