Ming Lei e82fc78557 block: don't create too many partitions ...

Commit a33df75c63 ("block: use an xarray for disk->part_tbl") drops the
check on max supported number of partitionsr, and allows partition with
bigger partition numbers to be added. However, ->bd_partno is defined as
u8, so partition index of xarray table may not match with ->bd_partno.
Then delete_partition() may delete one unmatched partition, and caused
use-after-free.

Reviewed-by: Bart Van Assche <bvanassche@acm.org>
Reported-by: syzbot+8fede7e30c7cee0de139@syzkaller.appspotmail.com
Fixes: a33df75c63 ("block: use an xarray for disk->part_tbl")
Signed-off-by: Ming Lei <ming.lei@redhat.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>

2021-03-27 09:22:18 -06:00

..

acorn.c

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00

aix.c

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00

amiga.c

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00

atari.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

atari.h

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00

check.h

block: move block layer internals out of include/linux/genhd.h

2020-03-25 09:50:08 -06:00

cmdline.c

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00

core.c

block: don't create too many partitions

2021-03-27 09:22:18 -06:00

efi.c

partitions/efi: Fix partition name parsing in GUID partition entry

2020-03-08 10:00:09 +01:00

efi.h

Merge branch 'efi-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2020-03-30 16:13:08 -07:00

ibm.c

partitions/ibm: fix non-DASD devices

2020-10-07 07:55:35 -06:00

karma.c

block: remove block/partitions/karma.h

2020-03-24 07:57:08 -06:00

Kconfig

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

ldm.c

partitions/ldm: Replace uuid_copy() with import_uuid() where it makes sense

2020-06-18 09:17:54 -06:00

ldm.h

block: Replace zero-length array with flexible-array

2020-06-15 23:08:32 -05:00

mac.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mac.h

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00

Makefile

block: merge partition-generic.c and check.c

2020-03-24 07:57:08 -06:00

msdos.c

block: move the various x86 Unix label formats out of genhd.h

2020-03-24 07:57:08 -06:00

osf.c

block: remove block/partitions/osf.h

2020-03-24 07:57:08 -06:00

sgi.c

block: move the *_PARTITION enum out of genhd.h

2020-03-24 07:57:08 -06:00

sun.c

block: move the *_PARTITION enum out of genhd.h

2020-03-24 07:57:08 -06:00

sysv68.c

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00

ultrix.c

block: declare all partition detection routines in check.h

2020-03-24 07:57:08 -06:00