Skip to content
Commit 7bc04c5c authored by Barret Rhoden's avatar Barret Rhoden Committed by Theodore Ts'o
Browse files

ext4: fix use-after-free race with debug_want_extra_isize



When remounting with debug_want_extra_isize, we were not performing the
same checks that we do during a normal mount.  That allowed us to set a
value for s_want_extra_isize that reached outside the s_inode_size.

Fixes: e2b911c5 ("ext4: clean up feature test macros with predicate functions")
Reported-by: default avatar <syzbot+f584efa0ac7213c226b7@syzkaller.appspotmail.com>
Reviewed-by: default avatarJan Kara <jack@suse.cz>
Signed-off-by: default avatarBarret Rhoden <brho@google.com>
Signed-off-by: default avatarTheodore Ts'o <tytso@mit.edu>
Cc: stable@vger.kernel.org
parent 8c380ab4
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment