linux-kernel - Re: [PATCH] btrfs: qgroup: fix slab-out-of-bounds in btrfs_qgroup

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <3C7EC608-7AD1-441E-9781-9135F6C352F7@gmail.com>
Date: Fri, 28 Jun 2024 10:21:47 +0900
From: Jeongjun Park <aha310510@...il.com>
To: Qu Wenruo <quwenruo.btrfs@....com>
Cc: clm@...com, dsterba@...e.com, josef@...icpanda.com,
 syzbot+a0d1f7e26910be4dc171@...kaller.appspotmail.com, fdmanana@...e.com,
 linux-btrfs@...r.kernel.org, linux-kernel@...r.kernel.org,
 syzkaller-bugs@...glegroups.com
Subject: Re: [PATCH] btrfs: qgroup: fix slab-out-of-bounds in btrfs_qgroup_inherit


> 2024. 6. 24. 오후 3:41, Qu Wenruo <quwenruo.btrfs@....com> 작성:
> 
> 
>> 在 2024/6/24 15:59, Jeongjun Park 写道:
>> While debugging, I also found that a problem
>> occurred in btrfs_qgroup_check_inherit().
>> While debugging, I also found that a problem
>> occurred in btrfs_qgroup_check_inherit().
>> 
>> I think out-of-bounds can be prevented
>> more effectively if the inspection logic
>> containing btrfs_qgroup_enabled() is
>> moved a little lower.
>> 
>> If possible, we will send you the v2 patch.
>> I think out-of-bounds can be prevented
>> more effectively if the inspection logic
>> containing btrfs_qgroup_enabled() is
>> moved a little lower.
>> 
>> I will send you the v2 patch later after work.
> 
> Mind to check my v2 patch?
> 
> https://lore.kernel.org/linux-btrfs/47d3dd33f637b70f230fa31f98dbf9ff066b58bb.1719207446.git.wqu@suse.com/T/#u
> 
> I believe this would be enough to prevent the bug from happening, with
> all the existing checks in-place.
> 
> Thanks,
> Qu

Perfact Thanks.

Jeongjun Park