David Sterba 75d6ad382b btrfs: more superblock checks, lower bounds on devices and sectorsize/nodesize ...

I received a few crafted images from Jiri, all got through the recently
added superblock checks. The lower bounds checks for num_devices and
sector/node -sizes were missing and caused a crash during mount.

Tools for symbolic code execution were used to prepare the images
contents.

Reported-by: Jiri Slaby <jslaby@suse.cz>
Signed-off-by: David Sterba <dsterba@suse.cz>
Signed-off-by: Chris Mason <clm@fb.com>

2015-02-02 19:20:39 -08:00

..

tests

btrfs: switch extent_state state to unsigned

2015-01-21 18:02:04 -08:00

acl.c

btrfs: remove useless ACL check

2014-06-09 17:20:42 -07:00

async-thread.c

btrfs: remove unlikely from NULL checks

2014-10-02 16:06:19 +02:00

async-thread.h

Btrfs: implement repair function when direct read fails

2014-09-17 13:39:01 -07:00

backref.c

btrfs: cleanup, remove inode_ref_info helper

2015-01-14 19:23:47 +01:00

backref.h

btrfs: cleanup, remove inode_item_info helper

2015-01-14 19:23:47 +01:00

btrfs_inode.h

Btrfs: Add code to support file creation time

2015-02-02 18:39:16 -08:00

check-integrity.c

Btrfs: include vmalloc.h in check-integrity.c

2014-11-25 06:01:11 -08:00

check-integrity.h

block: submit_bio_wait() conversions

2013-11-24 16:33:41 -07:00

compression.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

2014-12-12 11:15:23 -08:00

compression.h

btrfs: zero out left over bytes after processing compression streams

2014-11-30 09:33:51 -08:00

ctree.c

Btrfs: insert_new_root: Fix lock type of the extent buffer.

2015-01-22 05:42:23 -08:00

ctree.h

btrfs: kill btrfs_inode_*time helpers

2015-02-02 18:39:07 -08:00

delayed-inode.c

Btrfs: Add code to support file creation time

2015-02-02 18:39:16 -08:00

delayed-inode.h

Btrfs: introduce the delayed inode ref deletion for the single link inode

2014-01-28 13:20:09 -08:00

delayed-ref.c

Btrfs: rework qgroup accounting

2014-06-09 17:20:48 -07:00

delayed-ref.h

Btrfs: rework qgroup accounting

2014-06-09 17:20:48 -07:00

dev-replace.c

Btrfs: btrfs_rm_dev_replace_blocked(): Use wait_event()

2015-01-21 18:06:48 -08:00

dev-replace.h

Btrfs: add new sources for device replace code

2012-12-12 17:15:41 -05:00

dir-item.c

Btrfs: make xattr replace operations atomic

2014-11-20 17:20:07 -08:00

disk-io.c

btrfs: more superblock checks, lower bounds on devices and sectorsize/nodesize

2015-02-02 19:20:39 -08:00

disk-io.h

btrfs: sink blocksize parameter to btrfs_find_create_tree_block

2014-12-12 18:07:21 +01:00

export.c

btrfs: kill the key type accessor helpers

2014-09-17 13:37:12 -07:00

export.h

NFS support for btrfs - v3

2008-09-25 11:04:06 -04:00

extent_io.c

Btrfs: add ref_count and free function for btrfs_bio

2015-01-21 18:06:48 -08:00

extent_io.h

btrfs: switch extent_state state to unsigned

2015-01-21 18:02:04 -08:00

extent_map.c

Btrfs: do not move em to modified list when unpinning

2014-11-21 11:59:54 -08:00

extent_map.h

Btrfs: fix NULL pointer crash when running balance and scrub concurrently

2014-06-19 14:20:55 -07:00

extent-tree.c

Btrfs: cleanup unused run_most

2015-01-21 18:22:16 -08:00

file-item.c

Btrfs: fix kfree on list_head in btrfs_lookup_csums_range error cleanup

2014-11-04 06:59:04 -08:00

file.c

Btrfs: fix snapshot inconsistency after a file write followed by truncate

2014-11-25 07:41:23 -08:00

free-space-cache.c

Btrfs: track dirty block groups on their own list

2015-01-21 17:36:52 -08:00

free-space-cache.h

Btrfs: fix race between writing free space cache and trimming

2014-12-02 18:35:09 -08:00

hash.c

btrfs: LLVMLinux: Remove VLAIS

2014-10-14 10:51:22 +02:00

hash.h

Btrfs: fix btrfs boot when compiled as built-in

2014-01-28 13:20:31 -08:00

inode-item.c

Btrfs: fix fsync log replay for inodes with a mix of regular refs and extrefs

2015-01-21 18:02:05 -08:00

inode-map.c

Btrfs: fix race between writing free space cache and trimming

2014-12-02 18:35:09 -08:00

inode-map.h

Btrfs: Support reading/writing on disk free ino cache

2011-04-25 16:46:11 +08:00

inode.c

Btrfs: Add code to support file creation time

2015-02-02 18:39:16 -08:00

ioctl.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

2014-12-12 11:15:23 -08:00

Kconfig

Btrfs: fix btrfs boot when compiled as built-in

2014-01-28 13:20:31 -08:00

locking.c

btrfs: fix lockups from btrfs_clear_path_blocking

2014-11-19 10:34:35 -08:00

locking.h

btrfs: fix lockups from btrfs_clear_path_blocking

2014-11-19 10:34:35 -08:00

lzo.c

btrfs: zero out left over bytes after processing compression streams

2014-11-30 09:33:51 -08:00

Makefile

Btrfs: add sanity tests for new qgroup accounting code

2014-06-09 17:20:49 -07:00

math.h

Btrfs: cleanup duplicated division functions

2012-12-11 13:31:30 -05:00

ordered-data.c

Btrfs: collect only the necessary ordered extents on ranged fsync

2014-11-21 11:59:56 -08:00

ordered-data.h

Btrfs: collect only the necessary ordered extents on ranged fsync

2014-11-21 11:59:56 -08:00

orphan.c

btrfs: kill the key type accessor helpers

2014-09-17 13:37:12 -07:00

print-tree.c

btrfs: remove parameter blocksize from read_tree_block

2014-10-02 17:14:50 +02:00

print-tree.h

btrfs: make static code static & remove dead code

2013-05-06 15:55:23 -04:00

props.c

Btrfs: add support for inode properties

2014-01-28 13:20:24 -08:00

props.h

Btrfs: add support for inode properties

2014-01-28 13:20:24 -08:00

qgroup.c

btrfs: qgroup: move WARN_ON() to the correct location.

2015-01-21 18:22:37 -08:00

qgroup.h

btrfs: qgroup: account shared subtrees during snapshot delete

2014-08-15 07:43:14 -07:00

raid56.c

Btrfs: Include map_type in raid_bio

2015-01-21 18:06:49 -08:00

raid56.h

Btrfs: Make raid_map array be inlined in btrfs_bio structure

2015-01-21 18:06:47 -08:00

rcu-string.h

Btrfs: use rcu to protect device->name

2012-06-14 21:29:16 -04:00

reada.c

Btrfs: add ref_count and free function for btrfs_bio

2015-01-21 18:06:48 -08:00

relocation.c

btrfs: sink blocksize parameter to tree_block_processed

2014-12-12 18:07:22 +01:00

root-tree.c

Btrfs: use bitfield instead of integer data type for the some variants in btrfs_root

2014-06-09 17:20:40 -07:00

scrub.c

Rename all ref_count to refs in struct

2015-01-21 18:06:50 -08:00

send.c

btrfs: kill btrfs_inode_*time helpers

2015-02-02 18:39:07 -08:00

send.h

btrfs: make static code static & remove dead code

2013-05-06 15:55:23 -04:00

struct-funcs.c

Btrfs: rewrite BTRFS_SETGET_FUNCS

2012-07-23 16:28:06 -04:00

super.c

btrfs: remove a no-op unfreeze superbock callback

2015-01-21 18:02:04 -08:00

sysfs.c

btrfs: move commit out of sysfs when changing label

2014-11-12 16:53:15 +01:00

sysfs.h

btrfs: code optimize: BTRFS_ATTR_RW could set the mode

2014-09-17 13:37:59 -07:00

transaction.c

Btrfs: track dirty block groups on their own list

2015-01-21 17:36:52 -08:00

transaction.h

Btrfs: track dirty block groups on their own list

2015-01-21 17:36:52 -08:00

tree-defrag.c

Btrfs: use bitfield instead of integer data type for the some variants in btrfs_root

2014-06-09 17:20:40 -07:00

tree-log.c

btrfs: kill btrfs_inode_*time helpers

2015-02-02 18:39:07 -08:00

tree-log.h

Btrfs: fix data corruption after fast fsync and writeback error

2014-09-19 06:57:51 -07:00

ulist.c

Btrfs: do not export ulist functions

2014-01-29 07:06:27 -08:00

ulist.h

Btrfs: Fix memory corruption by ulist_add_merge() on 32bit arch

2014-08-15 07:43:19 -07:00

uuid-tree.c

Btrfs: make btrfs_search_forward return with nodes unlocked

2014-09-17 13:38:02 -07:00

volumes.c

Btrfs: Introduce BTRFS_BLOCK_GROUP_RAID56_MASK to check raid56 simply

2015-01-21 18:06:49 -08:00

volumes.h

Btrfs: Include map_type in raid_bio

2015-01-21 18:06:49 -08:00

xattr.c

Btrfs: make xattr replace operations atomic

2014-11-20 17:20:07 -08:00

xattr.h

btrfs: use generic posix ACL infrastructure

2014-01-25 23:58:18 -05:00

zlib.c

btrfs: zero out left over bytes after processing compression streams

2014-11-30 09:33:51 -08:00