[GIT PULL] ntfs3: changes for 7.3
From: Konstantin Komarov
Date: Tue Aug 18 2026 - 08:21:40 EST
Hello, please pull this branch containing ntfs3 code for 7.3.
Regards,
Konstantin
----------------------------------------------------------------
The following changes since commit dc59e4fea9d83f03bad6bddf3fa2e52491777482:
Linux 7.2-rc1 (2026-06-28 12:01:31 -0700)
are available in the Git repository at:
https://github.com/Paragon-Software-Group/linux-ntfs3.git tags/ntfs3_for_7.3
for you to fetch changes up to c22f91d82cb9a29d22bdffdce6c803467984ad0c:
fs/ntfs3: validate ef->size covers the record's name and value (2026-08-18 10:35:39 +0200)
----------------------------------------------------------------
Changes for 7.3-rc1
Added:
load ATTR_BITMAP run extents from $MFT extension records
initialize err in attr_wof_frame_info
reserve NUL byte when converting UTF-16 names
reject restart table growth beyond U16_MAX entries
validate dirty page table on log replay
basic support for alternative data streams
validate ef->size covers the record's name and value
Fixed:
slab-out-of-bounds write in ni_create_attr_list()
out-of-bounds read of INDEX_ROOT in reparse/objid init
boundary check in ntfs_dir_count()
info-leak in ntfs_rename()
lseek EINVAL on sparse/compressed files with 64-bit clusters
info-leak on partial LZNT decompress in ni_read_frame()
bound page_lcns[] index by the log record
memory leak in indx_find_sort()
integer overflow in MFT cluster validation
reject out-of-range evcn in mi_enum_attr()
out-of-bounds read in read_log_rec_buf()
Changed:
widen inode/record number storage to u64
cosmetic fixes and improvements
rename 'err' to 'ret' in read paths
----------------------------------------------------------------
HE WEI(ギカク) (1):
fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
Konstantin Komarov (10):
fs/ntfs3: widen inode/record number storage to u64
fs/ntfs3: cosmetic fixes and improvements
ntfs3: fix boundary check in ntfs_dir_count()
ntfs3: fix info-leak in ntfs_rename()
fs/ntfs3: load ATTR_BITMAP run extents from $MFT extension records
fs/ntfs3: bound page_lcns[] index by the log record
fs/ntfs3: Fix memory leak in indx_find_sort()
fs/ntfs3: Rename 'err' to 'ret' in read paths
fs/ntfs3: Add basic support for alternative data streams
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
Kyle Zeng (1):
fs/ntfs3: reserve NUL byte when converting UTF-16 names
Ruoyu Wang (1):
ntfs3: initialize err in attr_wof_frame_info
Samuel Page (1):
fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
Senjin (1):
fs/ntfs3: fix lseek EINVAL on sparse/compressed files with 64-bit clusters
Weiming Shi (2):
fs/ntfs3: reject restart table growth beyond U16_MAX entries
fs/ntfs3: validate ef->size covers the record's name and value
Weiming Wu (1):
fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
Xiang Mei (1):
fs/ntfs3: validate dirty page table on log replay
Zhan Xusheng (2):
fs/ntfs3: fix integer overflow in MFT cluster validation
fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
fs/ntfs3/attrib.c | 159 +++++++++++++++++-----------
fs/ntfs3/attrlist.c | 15 ++-
fs/ntfs3/dir.c | 132 ++++++++++++++++-------
fs/ntfs3/file.c | 66 ++++++++----
fs/ntfs3/frecord.c | 199 +++++++++++++++++++++++++++++------
fs/ntfs3/fslog.c | 68 +++++++++---
fs/ntfs3/fsntfs.c | 34 ++++--
fs/ntfs3/index.c | 8 +-
fs/ntfs3/inode.c | 298 +++++++++++++++++++++++++++++++++++++++++++++-------
fs/ntfs3/lznt.c | 4 +-
fs/ntfs3/namei.c | 64 +++++++----
fs/ntfs3/ntfs.h | 3 +-
fs/ntfs3/ntfs_fs.h | 51 ++++++---
fs/ntfs3/record.c | 34 +++++-
fs/ntfs3/run.c | 9 +-
fs/ntfs3/super.c | 38 +++++--
fs/ntfs3/xattr.c | 22 ++--
17 files changed, 922 insertions(+), 282 deletions(-)