f2fs: fix to detect corrupted meta ino
authorChao Yu <chao@kernel.org>
Tue, 13 Sep 2022 07:48:12 +0000 (15:48 +0800)
committerJaegeuk Kim <jaegeuk@kernel.org>
Tue, 4 Oct 2022 20:31:44 +0000 (13:31 -0700)
commitfcc2d8cc96b2f6141bbbe5b1e8953db990794b44
tree83d253986d03421ea4e54c1a124c6e9deffa4a1a
parentd80afefb17e01aa0c46a8eebc01882e0ebd8b0f6
f2fs: fix to detect corrupted meta ino

It is possible that ino of dirent or orphan inode is corrupted in a
fuzzed image, occasionally, if corrupted ino is equal to meta ino:
meta_ino, node_ino or compress_ino, caller of f2fs_iget() from below
call paths will get meta inode directly, it's not allowed, let's
add sanity check to detect such cases.

case #1
- recover_dentry
 - __f2fs_find_entry
 - f2fs_iget_retry

case #2
- recover_orphan_inode
 - f2fs_iget_retry

Signed-off-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
fs/f2fs/inode.c