mirror of
https://github.com/torvalds/linux.git
synced 2026-11-06 21:58:01 +01:00
0ff8f40110
The bulk of this cycle is hardening against corrupted or maliciously crafted volumes. Most of these fixes come from fuzzing and KASAN reports. The main areas are: - $LogFile replay, where several unchecked on-disk sizes could make mount write past the MFT record buffer; - MFT record and index parsing; - extended attributes, where a bad $EA entry could leak up to 64K of kernel heap to userspace through getxattr(). Reading a damaged compressed file could also return uninitialized page cache contents to userspace; that is fixed too. A few fixes affect healthy volumes as well: a heap overflow in fallocate(INSERT_RANGE) on small files, a use-after-free when a WOF-compressed file is opened for writing during a concurrent read, a lock-order deadlock in readdir, and stale disk data showing up in newly allocated clusters of compressed files. On the feature side there are new tracepoints covering mount, log replay, lookup, directory index, allocation, iomap and file I/O. There is also a new 'ugm' mount option (on by default): with ugm=0, newly created files don't get the WSL uid/gid/mode extended attributes, which Windows doesn't use. The rest is smaller correctness fixes and cleanups. -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEh0DEKNP0I9IjwfWEqbAzH4MkB7YFAmrhpBYACgkQqbAzH4Mk B7btoBAAoCzDYPS9wsEsO/6NKqzEe37jChs8G5cLKOKqqinZwm3Fvj12D1sartiX SA8zJDU/lvzGrqhNz6/ofL3f7NZXw/GTfr8ShQxK019VDJzzacH5wqGPcyJkOsIJ Rw5O1GqdMArKaSXFBczWqb7ukR0UYugarbMtcQBiW3hVqGVRLiRyAtHNBFJ/vFJ+ ec6hjbhspH++CXRBXOONFcem95Nzj3IQTxUzkVycf+0QjbAT28RkOwNrywPqZaD7 LmMPK4QlLeCzV37D16BXnHrBVg9uCiLmy/OThh1V1YyIX57Tjdj2p+V6SOX4HtXs HBfhFeWweeAWLex/J2qH9MiOPr7z5cKDBmWtj4MALqpy79JL/0lj7nRtqP0Ucud8 P3a+sLdKd7bDdHgs6jpxR2IX6JRsOgmJwcutU4R3yAApZTgIOArF1vrn5qyqj1OC s9szxfRUEaJu4ulYXJCx2lWwbg7Yy0oK8RseLDUGNxxX8v6aWiE98MSwFYIoo3tv 50V/yxPqEeHwXWZH7AlaKHCuJHGr9erFuSlau+uRnqk0D1MuSFrNxMUO58j2P9W0 py9vqMd8mIB3Ym6ZNQgkHzz8lNnYwgw82CSnfH5Tma5jfw7g3rS+/tM9vnSOFFHT OVyo9ViYWciSQ/oR2WzzPUZT4yspBZ1VaZGvWhIJ1vhgK/apgf4= =aRkz -----END PGP SIGNATURE----- Merge tag 'ntfs3_for_7.4' of https://github.com/Paragon-Software-Group/linux-ntfs3 Pull ntfs3 updates from Konstantin Komarov: "The bulk of this cycle is hardening against corrupted or maliciously crafted volumes. Most of these fixes come from fuzzing and KASAN reports. The main areas are: - $LogFile replay, where several unchecked on-disk sizes could make mount write past the MFT record buffer - MFT record and index parsing - extended attributes, where a bad $EA entry could leak up to 64K of kernel heap to userspace through getxattr() Reading a damaged compressed file could also return uninitialized page cache contents to userspace; that is fixed too. A few fixes affect healthy volumes as well: a heap overflow in fallocate(INSERT_RANGE) on small files, a use-after-free when a WOF-compressed file is opened for writing during a concurrent read, a lock-order deadlock in readdir, and stale disk data showing up in newly allocated clusters of compressed files. On the feature side there are new tracepoints covering mount, log replay, lookup, directory index, allocation, iomap and file I/O. There is also a new 'ugm' mount option (on by default): with ugm=0, newly created files don't get the WSL uid/gid/mode extended attributes, which Windows doesn't use. The rest is smaller correctness fixes and cleanups" * tag 'ntfs3_for_7.4' of https://github.com/Paragon-Software-Group/linux-ntfs3: (52 commits) ntfs3: add file I/O tracepoints ntfs3: add iomap tracepoints ntfs3: add allocation tracepoints ntfs3: add directory index tracepoints ntfs3: add create inode tracepoint ntfs3: add namei tracepoints ntfs3: add mount and log replay tracepoints fs/ntfs3: validate the EA value length in ntfs_read_ea() fs/ntfs3: handle partial allocation in attr_data_get_block_locked() ntfs3: fix mapping pairs bounds check for alignment fs/ntfs3: bound DeleteAttribute asize against rec->used in do_action ntfs3: release ni_lock before dir_emit in ntfs_readdir to fix deadlocks fs/ntfs3: bound CreateAttribute asize against record_size in do_action fs/ntfs3: do not mark frame pages uptodate on read error fs/ntfs3: prevent positive E_NTFS_NONRESIDENT from reaching writeback error handling fs/ntfs3: fix ntfs_fnd leak when compare function is missing fs/ntfs3: fix stale attr_b in attr_allocate_frame() fs/ntfs3: reject unaligned hole punching on compressed files fs/ntfs3: take ni_lock() once in ntfs_readdir() fs/ntfs3: reserve a compression unit in maxbytes_sparse ... |
||
|---|---|---|
| .. | ||
| lib | ||
| attrib.c | ||
| attrlist.c | ||
| bitfunc.c | ||
| bitmap.c | ||
| debug.h | ||
| dir.c | ||
| file.c | ||
| frecord.c | ||
| fslog.c | ||
| fsntfs.c | ||
| index.c | ||
| inode.c | ||
| Kconfig | ||
| lznt.c | ||
| Makefile | ||
| namei.c | ||
| ntfs_fs.h | ||
| ntfs.h | ||
| record.c | ||
| run.c | ||
| super.c | ||
| upcase.c | ||
| xattr.c | ||