Colin Ian King aefe207d95 fs/ufs: avoid potential u32 multiplication overflow ... [ Upstream commit 88b2e9b063 ] The 64 bit ino is being compared to the product of two u32 values, however, the multiplication is being performed using a 32 bit multiply so there is a potential of an overflow. To be fully safe, cast uspi->s_ncg to a u64 to ensure a 64 bit multiplication occurs to avoid any chance of overflow. Fixes: f3e2a520f5 ("ufs: NFS support") Signed-off-by: Colin Ian King <colin.king@canonical.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Cc: Evgeniy Dushistov <dushistov@mail.ru> Cc: Alexey Dobriyan <adobriyan@gmail.com> Link: http://lkml.kernel.org/r/20200715170355.1081713-1-colin.king@canonical.com Addresses-Coverity: ("Unintentional integer overflow") Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-08-21 11:05:38 +02:00
..
9p	9p: Fix memory leak in v9fs_mount	2020-08-19 08:15:06 +02:00
adfs
affs	affs: fix a memory leak in affs_remount	2020-01-27 14:51:21 +01:00
afs	afs: afs_write_end() should change i_size under the right lock	2020-06-25 15:33:06 +02:00
autofs
befs
bfs
btrfs	btrfs: fix return value mixup in btrfs_get_extent	2020-08-21 11:05:30 +02:00
cachefiles	cachefiles: Fix race between read_waiter and read_copier involving op->to_do	2020-06-03 08:19:29 +02:00
ceph	ceph: fix double unlock in handle_cap_export()	2020-05-27 17:37:34 +02:00
cifs	cifs: Fix leak when handling lease break for cached root fid	2020-08-21 11:05:31 +02:00
coda
configfs	configfs: fix config_item refcnt leak in configfs_rmdir()	2020-05-27 17:37:32 +02:00
cramfs
crypto
debugfs
devpts
dlm	dlm: Fix kobject memleak	2020-08-19 08:15:02 +02:00
ecryptfs	ecryptfs: replace BUG_ON with error handling code	2020-02-28 16:38:59 +01:00
efivarfs
efs
exofs
exportfs
ext2	ext2: fix missing percpu_counter_inc	2020-08-21 11:05:32 +02:00
ext4	ext4: fix direct I/O read error	2020-08-07 09:36:21 +02:00
f2fs	f2fs: report delalloc reserve as non-free in statfs for project quota	2020-06-25 15:32:49 +02:00
fat	fat: don't allow to mount if the FAT length == 0	2020-06-22 09:05:08 +02:00
freevxfs
fscache
fuse	fuse: fix weird page warning	2020-07-29 10:16:46 +02:00
gfs2	gfs2: read-only mounts should grab the sd_freeze_gl glock	2020-07-22 09:32:01 +02:00
hfs
hfsplus	hfsplus: fix crash and filesystem corruption when deleting files	2020-04-17 10:48:52 +02:00
hostfs
hpfs
hugetlbfs
isofs
jbd2	jbd2: improve comments about freeing data buffers whose page mapping is NULL	2020-04-21 09:03:06 +02:00
jffs2
jfs	jfs: fix bogus variable self-initialization	2020-01-27 14:50:33 +01:00
kernfs
lockd
minix	fs/minix: remove expected error message in block_to_path()	2020-08-21 11:05:38 +02:00
nfs	nfs: Fix getxattr kernel panic and memory overflow	2020-08-21 11:05:38 +02:00
nfs_common
nfsd	nfsd: apply umask on fs without ACL support	2020-07-09 09:37:11 +02:00
nilfs2	nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()	2020-06-22 09:05:03 +02:00
nls
notify	fanotify: fix ignore mask logic for events on child and on dir	2020-06-30 23:17:00 -04:00
ntfs
ocfs2	ocfs2: change slot number type s16 to u16	2020-08-21 11:05:33 +02:00
omfs
openpromfs
orangefs	help_next should increase position index	2020-02-24 08:34:53 +01:00
overlayfs	ovl: fix unneeded call to ovl_change_flags()	2020-07-22 09:32:10 +02:00
proc	proc: Use new_inode not new_inode_pseudo	2020-06-22 09:05:06 +02:00
pstore	pstore: Fix linking when crypto API disabled	2020-08-19 08:15:04 +02:00
qnx4
qnx6
quota
ramfs
reiserfs	reiserfs: prevent NULL pointer dereference in reiserfs_insert_item()	2020-02-24 08:34:52 +01:00
romfs
squashfs
sysfs
sysv
tracefs
ubifs	ubifs: remove broken lazytime support	2020-05-27 17:37:30 +02:00
udf	udf: Fix free space reporting for metadata and virtual partitions	2020-02-24 08:34:45 +01:00
ufs	fs/ufs: avoid potential u32 multiplication overflow	2020-08-21 11:05:38 +02:00
xfs	xfs: fix reflink quota reservation accounting error	2020-08-19 08:14:56 +02:00
aio.c	aio: fix async fsync creds	2020-06-22 09:05:01 +02:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf_fdpic.c
binfmt_elf.c	fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()	2020-06-03 08:19:41 +02:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
block_dev.c	block: Fix use-after-free in blkdev_get()	2020-06-25 15:33:06 +02:00
buffer.c	ext4: use non-movable memory for superblock readahead	2020-04-23 10:30:12 +02:00
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c
compat.c
coredump.c	coredump: fix crash when umh is disabled	2020-05-14 07:57:21 +02:00
d_path.c
dax.c	dax: pass NOWAIT flag to iomap_apply	2020-03-05 16:42:12 +01:00
dcache.c
dcookies.c
direct-io.c
drop_caches.c
eventfd.c	eventfd: track eventfd_signal() recursion depth	2020-02-11 04:34:08 -08:00
eventpoll.c
exec.c	exec: Move would_dump into flush_old_exec	2020-05-20 08:18:50 +02:00
fcntl.c
fhandle.c
file_table.c
file.c	fix multiplication overflow in copy_fdtable()	2020-05-27 17:37:29 +02:00
filesystems.c	fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()	2020-04-17 10:48:51 +02:00
fs_pin.c
fs_struct.c
fs-writeback.c	cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages	2020-06-22 09:05:03 +02:00
inode.c	futex: Fix inode life-time issue	2020-03-25 08:06:14 +01:00
internal.h
ioctl.c
iomap.c
Kconfig
Kconfig.binfmt
libfs.c	libfs: fix infoleak in simple_attr_read()	2020-04-02 15:28:21 +02:00
locks.c
Makefile
mbcache.c
mount.h
mpage.c
namei.c	namei: only return -ECHILD from follow_dotdot_rcu()	2020-03-05 16:42:20 +01:00
namespace.c	fs/namespace.c: fix mountpoint reference counter race	2020-04-29 16:31:26 +02:00
no-block.c
nsfs.c
open.c	cifs_atomic_open(): fix double-put on late allocation failure	2020-03-18 07:14:21 +01:00
pipe.c
pnode.c	propagate_one(): mnt_set_mountpoint() needs mount_lock	2020-05-02 17:26:01 +02:00
pnode.h
posix_acl.c
proc_namespace.c
read_write.c
readdir.c
select.c
seq_file.c
signalfd.c
splice.c
stack.c
stat.c
statfs.c
super.c
sync.c
timerfd.c
userfaultfd.c
utimes.c
xattr.c	xattr: break delegations in {set,remove}xattr	2020-08-11 15:32:34 +02:00