diff options
| author | 2025-06-08 11:58:59 -0400 | |
|---|---|---|
| committer | 2025-06-11 23:21:30 -0400 | |
| commit | 082c74411491f8b0d31465fc104b8342e66c4056 (patch) | |
| tree | 9719aaa2f4a1807e6891e6aa9ade1440180ff9bf /scripts/basic/git:/ssh:/git@git.zx2c4.com | |
| parent | bcachefs: Don't put rhashtable on stack (diff) | |
| download | wireguard-linux-082c74411491f8b0d31465fc104b8342e66c4056.tar.xz wireguard-linux-082c74411491f8b0d31465fc104b8342e66c4056.zip | |
bcachefs: Fix downgrade_table_extra()
Fix a UAF: we were calling darray_make_room() and retaining a pointer to
the old buffer.
And fix an UBSAN warning: struct bch_sb_field_downgrade_entry uses
__counted_by, so set dst->nr_errors before assigning to the array entry.
Reported-by: syzbot+14c52d86ddbd89bea13e@syzkaller.appspotmail.com
Signed-off-by: Kent Overstreet <kent.overstreet@linux.dev>
Diffstat (limited to 'scripts/basic/git:/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions
