Commit d1f4531b authored by Vasiliy Kovalev's avatar Vasiliy Kovalev Committed by Zizhi Wo
Browse files

ovl: Filter invalid inodes with missing lookup function 

mainline inclusion
from mainline-v6.13-rc1
commit c8b359dddb418c60df1a69beea01d1b3322bfe83
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/IBEAML
CVE: CVE-2024-56570

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c8b359dddb418c60df1a69beea01d1b3322bfe83



--------------------------------

Add a check to the ovl_dentry_weird() function to prevent the
processing of directory inodes that lack the lookup function.
This is important because such inodes can cause errors in overlayfs
when passed to the lowerstack.

Reported-by: default avatar <syzbot+a8c9d476508bd14a90e5@syzkaller.appspotmail.com>
Link: https://syzkaller.appspot.com/bug?extid=a8c9d476508bd14a90e5


Suggested-by: default avatarMiklos Szeredi <miklos@szeredi.hu>
Link: https://lore.kernel.org/linux-unionfs/CAJfpegvx-oS9XGuwpJx=Xe28_jzWx5eRo1y900_ZzWY+=gGzUg@mail.gmail.com/


Signed-off-by: default avatarVasiliy Kovalev <kovalev@altlinux.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: default avatarAmir Goldstein <amir73il@gmail.com>
Signed-off-by: default avatarZizhi Wo <wozizhi@huawei.com>
parent 4c116feb

fs/overlayfs/util.c

+3 −0
Original line number Diff line number Diff line
@@ -102,6 +102,9 @@ bool ovl_dentry_remote(struct dentry *dentry) 


bool ovl_dentry_weird(struct dentry *dentry)

{

	if (!d_can_lookup(dentry) && !d_is_file(dentry) && !d_is_symlink(dentry))

		return true;



	return dentry->d_flags & (DCACHE_NEED_AUTOMOUNT |

				  DCACHE_MANAGE_TRANSIT |

				  DCACHE_OP_HASH |