]> git.baikalelectronics.ru Git - kernel.git/commit
jffs2: Fix possible null-pointer dereferences in jffs2_add_frag_to_fragtree()
authorJia-Ju Bai <baijiaju1990@gmail.com>
Wed, 24 Jul 2019 02:46:58 +0000 (10:46 +0800)
committerRichard Weinberger <richard@nod.at>
Sun, 15 Sep 2019 20:42:10 +0000 (22:42 +0200)
commit26be385858899d48e0bcd944d0f7cd59b419acab
tree3d7558b9a985024eb9eb80cda548153d5f89c858
parentb445f809dc08c6802dd9008bf5561784cfc8eb41
jffs2: Fix possible null-pointer dereferences in jffs2_add_frag_to_fragtree()

In jffs2_add_frag_to_fragtree(), there is an if statement on line 223 to
check whether "this" is NULL:
    if (this)

When "this" is NULL, it is used at several places, such as on line 249:
    if (this->node)
and on line 260:
    if (newfrag->ofs > this->ofs)

Thus possible null-pointer dereferences may occur.

To fix these bugs, -EINVAL is returned when "this" is NULL.

These bugs are found by a static analysis tool STCheck written by us.

Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
fs/jffs2/nodelist.c