Re: [PATCH] jfs: Fix array-index-out-of-bounds in diFree

From: Jeongjun Park
Date: Thu Apr 25 2024 - 10:29:55 EST


Matthew Wilcox wrote:
> It should be checked earlier than this. There's this code in
> dbMount(). Why isn't this catching it?

This vulnerability occurs because a very large value can be passed
to iagp->agstart. So that code doesn't prevent the vulnerability.