TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v6.1.128
twx-linux/block
T
History
Alexey Dobriyan 8476f8428e block: fix integer overflow in BLKSECDISCARD 
commit 697ba0b6ec upstream.

I independently rediscovered

	commit 22d24a544b
	block: fix overflow in blk_ioctl_discard()

but for secure erase.

Same problem:

	uint64_t r[2] = {512, 18446744073709551104ULL};
	ioctl(fd, BLKSECDISCARD, r);

will enter near infinite loop inside blkdev_issue_secure_erase():

	a.out: attempt to access beyond end of device
	loop0: rw=5, sector=3399043073, nr_sectors = 1024 limit=2048
	bio_check_eod: 3286214 callbacks suppressed

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Link: https://lore.kernel.org/r/9e64057f-650a-46d1-b9f7-34af391536ef@p183
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Rajani Kantha <rajanikantha@engineer.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-02-01 18:30:09 +01:00
..
partitions
block: fix potential invalid pointer dereference in blk_add_partition
2024-10-17 15:20:45 +02:00
badblocks.c
…
bdev.c
…
bfq-cgroup.c
…
bfq-iosched.c
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
2025-01-17 13:34:47 +01:00
bfq-iosched.h
…
bfq-wf2q.c
…
bio-integrity.c
block: initialize integrity buffer to zero before writing it to media
2024-08-03 08:48:53 +02:00
bio.c
block: Fix page refcounts for unaligned buffers in __bio_release_pages()
2024-04-03 15:19:46 +02:00
blk-cgroup-fc-appid.c
…
blk-cgroup-rwstat.c
…
blk-cgroup-rwstat.h
…
blk-cgroup.c
blk-cgroup: Fix UAF in blkcg_unpin_online()
2024-12-19 18:08:48 +01:00
blk-cgroup.h
…
blk-core.c
block: Fix where bio IO priority gets set
2024-09-30 16:23:50 +02:00
blk-crypto-fallback.c
…
blk-crypto-internal.h
…
blk-crypto-profile.c
…
blk-crypto-sysfs.c
…
blk-crypto.c
…
blk-flush.c
…
blk-ia-ranges.c
…
blk-integrity.c
blk-integrity: register sysfs attributes on struct device
2024-10-17 15:21:48 +02:00
blk-ioc.c
…
blk-iocost.c
blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
2024-12-19 18:08:57 +01:00
blk-iolatency.c
…
blk-ioprio.c
…
blk-ioprio.h
…
blk-lib.c
…
blk-map.c
block: fix sanity checks in blk_rq_map_user_bvec
2024-11-08 16:26:45 +01:00
blk-merge.c
block: fix bio_split_rw_at to take zone_write_granularity into account
2024-12-14 19:53:15 +01:00
blk-mq-cpumap.c
…
blk-mq-debugfs-zoned.c
…
blk-mq-debugfs.c
…
blk-mq-debugfs.h
…
blk-mq-pci.c
…
blk-mq-rdma.c
…
blk-mq-sched.c
…
blk-mq-sched.h
…
blk-mq-sysfs.c
…
blk-mq-tag.c
block: Fix lockdep warning in blk_mq_mark_tag_wait
2024-08-29 17:30:33 +02:00
blk-mq-tag.h
…
blk-mq-virtio.c
…
blk-mq.c
blk-mq: register cpuhp callback after hctx is added to xarray table
2025-01-02 10:30:52 +01:00
blk-mq.h
block: fix ordering between checking BLK_MQ_S_STOPPED request adding
2024-12-14 19:54:04 +01:00
blk-pm.c
…
blk-pm.h
…
blk-rq-qos.c
blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
2024-10-22 15:56:45 +02:00
blk-rq-qos.h
…
blk-settings.c
block: Clear zone limits for a non-zoned stacked queue
2024-04-03 15:19:27 +02:00
blk-stat.c
block: prevent division by zero in blk_rq_stat_sum()
2024-04-13 13:05:12 +02:00
blk-stat.h
…
blk-sysfs.c
block: fix uaf for flush rq while iterating tags
2025-01-23 17:17:16 +01:00
blk-throttle.c
…
blk-throttle.h
…
blk-timeout.c
…
blk-wbt.c
…
blk-wbt.h
…
blk-zoned.c
…
blk.h
blk-integrity: register sysfs attributes on struct device
2024-10-17 15:21:48 +02:00
bounce.c
…
bsg-lib.c
…
bsg.c
…
disk-events.c
…
elevator.c
block: Fix elevator_get_default() checking for NULL q->tag_set
2024-11-17 15:07:20 +01:00
elevator.h
…
fops.c
…
genhd.c
block: fix uaf for flush rq while iterating tags
2025-01-23 17:17:16 +01:00
holder.c
…
ioctl.c
block: fix integer overflow in BLKSECDISCARD
2025-02-01 18:30:09 +01:00
ioprio.c
…
Kconfig
…
Kconfig.iosched
…
kyber-iosched.c
…
Makefile
…
mq-deadline.c
block/mq-deadline: Fix the tag reservation code
2024-08-14 13:53:02 +02:00
opal_proto.h
block: sed-opal: handle empty atoms when parsing response
2024-03-26 18:20:26 -04:00
sed-opal.c
block: sed-opal: handle empty atoms when parsing response
2024-03-26 18:20:26 -04:00
t10-pi.c
…