From: Joe Thornber Date: Fri, 10 Dec 2021 13:49:53 +0000 (+0000) Subject: dm space map common: add bounds check to sm_ll_lookup_bitmap() X-Git-Tag: accepted/tizen/unified/20230118.172025~3110 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=1674124a885575fcb54d37e7ac90e1e15696b945;p=platform%2Fkernel%2Flinux-rpi.git dm space map common: add bounds check to sm_ll_lookup_bitmap() [ Upstream commit cba23ac158db7f3cd48a923d6861bee2eb7a2978 ] Corrupted metadata could warrant returning error from sm_ll_lookup_bitmap(). Signed-off-by: Joe Thornber Signed-off-by: Mike Snitzer Signed-off-by: Sasha Levin --- diff --git a/drivers/md/persistent-data/dm-space-map-common.c b/drivers/md/persistent-data/dm-space-map-common.c index 4a6a2a9..bfbfa75 100644 --- a/drivers/md/persistent-data/dm-space-map-common.c +++ b/drivers/md/persistent-data/dm-space-map-common.c @@ -283,6 +283,11 @@ int sm_ll_lookup_bitmap(struct ll_disk *ll, dm_block_t b, uint32_t *result) struct disk_index_entry ie_disk; struct dm_block *blk; + if (b >= ll->nr_blocks) { + DMERR_LIMIT("metadata block out of bounds"); + return -EINVAL; + } + b = do_div(index, ll->entries_per_block); r = ll->load_ie(ll, index, &ie_disk); if (r < 0)