Re: [PATCH] jfs: Fix array-index-out-of-bounds in diFree

From: Jeongjun Park
Date: Thu Apr 25 2024 - 08:44:50 EST


Through direct testing and debugging, I've determined that this
vulnerability occurs when mounting an incorrect image, leading to
the potential passing of an excessively large value to
'sbi->bmap->db_agl2size'. Importantly, there have been no instances
of memory corruption observed within 'sbi->bmap->db_agl2size'.

Therefore, I think implementing a patch that terminates the
function in cases where an invalid value is detected.

Thanks.