Skip to content

Commit afa8c51

Browse files
zhangyi089opsiff
authored andcommitted
ext4: ensure i_size is smaller than maxbytes
commit 1a77a02 upstream. The inode i_size cannot be larger than maxbytes, check it while loading inode from the disk. Signed-off-by: Zhang Yi <yi.zhang@huawei.com> Reviewed-by: Jan Kara <jack@suse.cz> Reviewed-by: Baokun Li <libaokun1@huawei.com> Link: https://patch.msgid.link/20250506012009.3896990-4-yi.zhang@huaweicloud.com Signed-off-by: Theodore Ts'o <tytso@mit.edu> Cc: stable@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 3e8a5163bcd3d92d4fc3a3116e6eeb67fcdded60)
1 parent 847243a commit afa8c51

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

fs/ext4/inode.c

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4939,7 +4939,8 @@ struct inode *__ext4_iget(struct super_block *sb, unsigned long ino,
49394939
ei->i_file_acl |=
49404940
((__u64)le16_to_cpu(raw_inode->i_file_acl_high)) << 32;
49414941
inode->i_size = ext4_isize(sb, raw_inode);
4942-
if ((size = i_size_read(inode)) < 0) {
4942+
size = i_size_read(inode);
4943+
if (size < 0 || size > ext4_get_maxbytes(inode)) {
49434944
ext4_error_inode(inode, function, line, 0,
49444945
"iget: bad i_size value: %lld", size);
49454946
ret = -EFSCORRUPTED;

0 commit comments

Comments
 (0)