jfs: check if leafidx greater than num leaves per dmap tree
authorEdward Adam Davis <eadavis@qq.com>
Sat, 24 Aug 2024 01:25:23 +0000 (09:25 +0800)
committerDave Kleikamp <dave.kleikamp@oracle.com>
Tue, 27 Aug 2024 16:32:45 +0000 (11:32 -0500)
commitd64ff0d2306713ff084d4b09f84ed1a8c75ecc32
tree8bfa346f07f579eec4dadea658ec98050fd030af
parentd6c1b3599b2feb5c7291f5ac3a36e5fa7cedb234
jfs: check if leafidx greater than num leaves per dmap tree

syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater
than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf.

Shaggy:
Modified sanity check to apply to control pages as well as leaf pages.

Reported-and-tested-by: syzbot+dca05492eff41f604890@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=dca05492eff41f604890
Signed-off-by: Edward Adam Davis <eadavis@qq.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
fs/jfs/jfs_dmap.c