Unverified Commit d2466a6c authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14875 *** jffs2: Prevent rtime decompress memory corruption *** 

Merge Pull Request from: @ci-robot 
 
PR sync from: Yongjian Sun <sunyongjian1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/DQVMXO7U7VM33LCGX4VE5SVGAW7CBOYQ/ 
*** BLURB HERE ***

Kinsey Moore (1):
  [Backport] jffs2: Prevent rtime decompress memory corruption

Richard Weinberger (1):
  [Backport] jffs2: Fix rtime decompressor


-- 
2.39.2
 
https://gitee.com/src-openeuler/kernel/issues/IBHWWI 
 
Link:https://gitee.com/openeuler/kernel/pulls/14875

 

Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents 683824f7 46e9ff26

fs/jffs2/compr_rtime.c

+3 −0
Original line number Diff line number Diff line
@@ -95,6 +95,9 @@ static int jffs2_rtime_decompress(unsigned char *data_in, 


		positions[value]=outpos;

		if (repeat) {

			if ((outpos + repeat) > destlen) {

				return 1;

			}

			if (backoffs + repeat >= outpos) {

				while(repeat) {

					cpage_out[outpos++] = cpage_out[backoffs++];