Re: [PATCH] jfs: Fix array-index-out-of-bounds in diFree

Jeongjun Park
2024-04-25T14:24:40Z

Matthew Wilcox wrote:
> It should be checked earlier than this. There's this code in
> dbMount(). Why isn't this catching it?

This vulnerability occurs because a very large value can be passed
to iagp->agstart. So that code doesn't prevent the vulnerability.