Re: [PATCH] jfs: Fix array-index-out-of-bounds in diFree

Jeongjun Park
2024-04-25T12:44:38Z

Through direct testing and debugging, I've determined that this
vulnerability occurs when mounting an incorrect image, leading to
the potential passing of an excessively large value to
'sbi->bmap->db_agl2size'. Importantly, there have been no instances
of memory corruption observed within 'sbi->bmap->db_agl2size'.

Therefore, I think implementing a patch that terminates the
function in cases where an invalid value is detected.

Thanks.