Hyungjung Joo 6fa253b38b affs: bound hash_pos before table lookup in affs_readdir ...

affs_readdir() decodes ctx->pos into hash_pos and chain_pos and then
dereferences AFFS_HEAD(dir_bh)->table[hash_pos] before validating
that hash_pos is within the runtime table bound. Treat out-of-range
positions as end-of-directory before the first table lookup.

Signed-off-by: Hyungjung Joo <jhj140711@gmail.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>

2026-04-10 02:51:05 +02:00

..

9p

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

adfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

affs

affs: bound hash_pos before table lookup in affs_readdir

2026-04-10 02:51:05 +02:00

afs

rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

2026-03-06 17:49:52 -08:00

autofs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

befs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

bfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

btrfs

Merge tag 'for-7.0-rc4-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux

2026-03-21 08:42:17 -07:00

cachefiles

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

ceph

ceph: do not skip the first folio of the next object in writeback

2026-03-09 12:34:40 +01:00

coda

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

configfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

cramfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

crypto

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

debugfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

devpts

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

dlm

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ecryptfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

efivarfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

efs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

erofs

erofs: fix interlaced plain identification for encoded extents

2026-02-25 17:40:58 +08:00

exfat

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

exportfs

fs: add helpers name_is_dot{,dot,_dotdot}

2026-01-29 10:06:59 +01:00

ext2

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

ext4

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

f2fs

Merge tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux

2026-02-22 13:12:04 -08:00

fat

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

freevxfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

fuse

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

gfs2

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

hfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

hfsplus

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

hostfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

hpfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

hugetlbfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

iomap

iomap: reject delalloc mappings during writeback

2026-03-04 14:31:56 +01:00

isofs

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

jbd2

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

jffs2

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

jfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

kernfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lockd

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

minix

Merge tag 'vfs-7.0-rc2.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-25 10:34:23 -08:00

netfs

netfs: Fix unbuffered/DIO writes to dispatch subrequests in strict sequence

2026-02-26 14:44:32 +01:00

nfs

NFS: Fix NFS KConfig typos

2026-02-27 15:42:14 -05:00

nfs_common

NFSD: Remove NFSERR_EAGAIN

2026-01-02 13:43:41 -05:00

nfsd

Merge tag 'nfsd-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux

2026-03-18 14:27:11 -07:00

nilfs2

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

nls

fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()

2025-12-01 11:58:06 +02:00

notify

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ntfs3

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

ocfs2

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

omfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

openpromfs

Coccinelle-based conversion to use ->i_state accessors

2025-10-20 20:22:26 +02:00

orangefs

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

overlayfs

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

proc

Merge tag 'vfs-7.0-rc2.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-25 10:34:23 -08:00

pstore

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

qnx4

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

qnx6

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

quota

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ramfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

resctrl

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

romfs

Merge tag 'mm-stable-2026-02-18-19-48' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-02-18 20:50:32 -08:00

smb

Merge tag 'v7.0-rc4-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6

2026-03-20 09:07:29 -07:00

squashfs

Squashfs: check metadata block offset is within range

2026-02-24 11:13:27 -08:00

sysfs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

tests

fs/tests: exec: Remove bad test vector

2026-03-18 11:41:53 -07:00

tracefs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ubifs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

udf

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

ufs

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

unicode

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

vboxsf

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

verity

fsverity: add dependency on 64K or smaller pages

2026-03-02 21:05:34 -08:00

xfs

xfs: fix integer overflow in bmap intent sort comparator

2026-03-11 13:21:42 +01:00

zonefs

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

aio.c

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

anon_inodes.c

anon_inodes: convert to FD_ADD()

2025-11-28 12:42:31 +01:00

attr.c

fs,fsverity: reject size changes on fsverity files in setattr_prepare

2026-01-29 09:39:41 -08:00

backing-file.c

Merge tag 'kernel-6.19-rc1.cred' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2025-12-01 13:45:41 -08:00

bad_inode.c

fs: refactor ->update_time handling

2026-01-12 14:01:32 +01:00

binfmt_elf_fdpic.c

binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4

2026-02-23 16:09:00 -08:00

binfmt_elf.c

rseq: slice ext: Ensure rseq feature size differs from original rseq size

2026-02-23 11:19:19 +01:00

binfmt_flat.c

…

binfmt_misc.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

binfmt_script.c

…

bpf_fs_kfuncs.c

bpf: Remove redundant KF_TRUSTED_ARGS flag from all kfuncs

2026-01-02 12:04:28 -08:00

buffer.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

char_dev.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

compat_binfmt_elf.c

…

coredump.c

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

d_path.c

…

dax.c

Merge tag 'mm-stable-2025-12-03-21-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2025-12-05 13:52:43 -08:00

dcache.c

Merge tag 'vfs-7.0-rc1.misc.2' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-16 13:00:36 -08:00

direct-io.c

…

drop_caches.c

Coccinelle-based conversion to use ->i_state accessors

2025-10-20 20:22:26 +02:00

eventfd.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

eventpoll.c

Merge tag 'vfs-7.0-rc2.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-25 10:34:23 -08:00

exec.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

fcntl.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

fhandle.c

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

file_attr.c

Merge tag 'vfs-7.0-rc2.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-25 10:34:23 -08:00

file_table.c

Merge tag 'erofs-for-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs

2026-02-09 16:08:40 -08:00

file.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

filesystems.c

sysfs(2): fs_index() argument is _not_ a pathname

2026-01-16 12:52:04 -05:00

fs_context.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

fs_dirent.c

fs: rename fs_types.h to fs_dirent.h

2025-11-05 09:51:30 +01:00

fs_parser.c

…

fs_pin.c

…

fs_struct.c

fs: add <linux/init_task.h> for 'init_fs'

2026-01-14 16:50:37 +01:00

fs-writeback.c

Merge tag 'vfs-7.0-rc2.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-25 10:34:23 -08:00

fserror.c

fs: report filesystem and file I/O errors to fsnotify

2026-01-13 09:58:01 +01:00

fsopen.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

init.c

Merge tag 'pull-filename' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2026-02-09 16:58:28 -08:00

inode.c

Merge tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux

2026-02-12 10:41:34 -08:00

internal.h

Merge tag 'pull-filename' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2026-02-09 16:58:28 -08:00

ioctl.c

…

Kconfig

…

Kconfig.binfmt

…

kernel_read_file.c

…

libfs.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

locks.c

Merge tag 'nfsd-7.0' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux

2026-02-12 08:23:53 -08:00

Makefile

Merge tag 'vfs-7.0-rc1.nullfs' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-09 13:41:34 -08:00

mbcache.c

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

mnt_idmapping.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

mount.h

fs: add immutable rootfs

2026-01-12 16:52:09 +01:00

mpage.c

…

namei.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

namespace.c

Merge tag 'vfs-7.0-rc2.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-25 10:34:23 -08:00

nsfs.c

nsfs: tighten permission checks for handle opening

2026-02-27 22:00:11 +01:00

nullfs.c

fs: add immutable rootfs

2026-01-12 16:52:09 +01:00

open.c

Merge tag 'pull-filename' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2026-02-09 16:58:28 -08:00

pidfs.c

Merge tag 'vfs-7.0-rc2.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-02-25 10:34:23 -08:00

pipe.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

pnode.c

…

pnode.h

…

posix_acl.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

proc_namespace.c

…

read_write.c

fs: add setlease to generic_ro_fops and read-only filesystem directory operations

2026-01-12 10:55:45 +01:00

readdir.c

readdir: require opt-in for d_type flags

2026-01-12 10:57:34 +01:00

remap_range.c

…

select.c

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

seq_file.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

signalfd.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

splice.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

stack.c

…

stat.c

statx: switch to CLASS(filename_maybe_null)

2026-01-16 12:52:04 -05:00

statfs.c

user_statfs(): switch to CLASS(filename)

2026-01-16 12:52:04 -05:00

super.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

sync.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

sysctls.c

…

timerfd.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

userfaultfd.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

utimes.c

do_utimes_path(): switch to CLASS(filename_uflags)

2026-01-16 12:52:03 -05:00

xattr.c

filename_...xattr(): don't consume filename reference

2026-01-16 12:52:03 -05:00