APPLIED[focal:hwe-5.8]: [SRU][Focal, hwe-5.8][PATCH 0/2] CVE-2019-19449

[Stefan Bader]

On 30.09.21 01:57, Luke Nowakowski-Krijger wrote:
> [Impact]
> Mounting a crafted f2fs file system with a segment count in a section
> that is less than segs_per_sec causes out-of-boundary memory access
> during fs initalization.
> 
> [Test case]
> Reproduced bug with syzbot reproducer
> (https://syzkaller.appspot.com/x/repro.c?x=102fbac5900000)
> with slight modification to target a valid loop device.
> Confirmed that after the patches were applied the fs reports that there
> are malformed segments/sections and mounting the file system fails,
> which stops the initialization from continuing and preventing the
> out-of-boundary memory access.
> 
> [Potential regression]
> The patches add checks that are a superset of the previous checks, which
> might cause some filesystems that succeeded in mounting to now fail.
> 
> Chao Yu (1):
>    f2fs: fix to do sanity check on segment/section count
> 
> Wang Xiaojun (1):
>    f2fs: fix wrong total_sections check and fsmeta check
> 
>   fs/f2fs/segment.h |  1 +
>   fs/f2fs/super.c   | 14 ++++++++++----
>   2 files changed, 11 insertions(+), 4 deletions(-)
> 

Applied to focal:linux-hwe-5.8/hwe-5.8. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20211004/4781b979/attachment.sig>