From aad1383cbf08c87f29f5dba1622e122717fbc32a Mon Sep 17 00:00:00 2001 From: Dan Robertson Date: Sun, 30 Aug 2020 21:45:23 +0000 Subject: f2fs: check position in move range ioctl When the move range ioctl is used, check the input and output position and ensure that it is a non-negative value. Without this check f2fs_get_dnode_of_data may hit a memmory bug. Signed-off-by: Dan Robertson Reviewed-by: Chao Yu Signed-off-by: Jaegeuk Kim --- fs/f2fs/file.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c index a7e15bec7a8e..0a958eef3d1f 100644 --- a/fs/f2fs/file.c +++ b/fs/f2fs/file.c @@ -2768,6 +2768,9 @@ static int f2fs_move_file_range(struct file *file_in, loff_t pos_in, if (IS_ENCRYPTED(src) || IS_ENCRYPTED(dst)) return -EOPNOTSUPP; + if (pos_out < 0 || pos_in < 0) + return -EINVAL; + if (src == dst) { if (pos_in == pos_out) return 0; -- cgit v1.2.3