Received: by 2002:a05:6a10:8c0a:0:0:0:0 with SMTP id go10csp1974409pxb; Fri, 5 Mar 2021 04:32:27 -0800 (PST) X-Google-Smtp-Source: ABdhPJwuLVU5o8ENaPHNQXB0GNfrxvcWUCMJc6svojKVIfGiQdcjJMrZ2HXwlPnK2SpQuhcqIkFP X-Received: by 2002:a17:906:c405:: with SMTP id u5mr2048533ejz.341.1614947547466; Fri, 05 Mar 2021 04:32:27 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1614947547; cv=none; d=google.com; s=arc-20160816; b=jQgYC3lLjWwSw/+Cd19Or0mXa3/J4r16l3YmstMJwzKwFOhDSqIM5InPWsvZnXkN0v nx+ISci3Toj5U0Rgkun43CyWwE44CySo9LQo3tGccI+Y4HxGFjclZpugCsuf/omaWdHH xowV7Tfc+Bhuwydym0Xqly7B/fAW5KexbNIqFK6JskuFvDnlU/DvwQ373ahTrtBSTwKV J8QKrczP0Htj1gRpdELmK0Dcj49xPZs7hNCNN1c8vye5BgKROvIeuRFBPSwEHE9b8v3f pq5oJqWjM0dncWSLS3prUMJo2gFzAwnHiG8Acw7R3jcIcbHKafacRJ3qwcB5s/zrC197 Opjw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :user-agent:references:in-reply-to:message-id:date:subject:cc:to :from:dkim-signature; bh=oPXIreDR4omNsu2n9I0lAYgBtmoyYoHzVYGq/5HAAPo=; b=t8adLPmWtqCafodD6t1AgQk5LqjUxH0MUhQ40Uy+Jho1bechRkyDXrmeb6Wl7v0O4M 0YAhILQE3DrqoF+++/SMqk1u9Viq30LYodf5PA0UzHDLDPBGyd967uJvCrUzy2ncS24V N6lZciKnnj3IRdTJ9G5hHFwAobORrYpEngjcYGJqSOjz8qKBuJZMEQmuoQ9CYDCdamsp jXtTG1AOC1A7Fnik92orPQykbc/+sE+qdxRhjhJmhl+b8IcEbN8gtFsXZdvYiolrq95m Jg02Vxt+2N8ky2cz4ofQmFB8EGItXGeEeI32bBSJFYSJBfodkUe2HOLkgKGto3nWiDJj lBtA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b="16Hj5I9/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id o13si1552481edi.135.2021.03.05.04.32.03; Fri, 05 Mar 2021 04:32:27 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b="16Hj5I9/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232301AbhCEMaX (ORCPT + 99 others); Fri, 5 Mar 2021 07:30:23 -0500 Received: from mail.kernel.org ([198.145.29.99]:39304 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232288AbhCEM35 (ORCPT ); Fri, 5 Mar 2021 07:29:57 -0500 Received: by mail.kernel.org (Postfix) with ESMTPSA id 22F7265013; Fri, 5 Mar 2021 12:29:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1614947396; bh=TkQ0G2I7tF1A03yoZaDZF426y33KeiUnafibNYznA04=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=16Hj5I9/kGnjtvIx0BpuRp3YzvgacvDjkKvl81FVz73bleRn2Uj7IvPSuyJDzWTPA uofl0d2XUfalLNO8fL+Lt2Uvx4WiZatTG6ogUGWKrK3O/YFc2CaKnYZXAxQABQ0GWZ LfctDPXKIDOj7EYgWyXyutPPpzkF8SFHLQAvVl/A= From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman , stable@vger.kernel.org, syzbot+c68f467cd7c45860e8d4@syzkaller.appspotmail.com, Chao Yu , Gao Xiang Subject: [PATCH 5.10 010/102] erofs: fix shift-out-of-bounds of blkszbits Date: Fri, 5 Mar 2021 13:20:29 +0100 Message-Id: <20210305120903.777403262@linuxfoundation.org> X-Mailer: git-send-email 2.30.1 In-Reply-To: <20210305120903.276489876@linuxfoundation.org> References: <20210305120903.276489876@linuxfoundation.org> User-Agent: quilt/0.66 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Gao Xiang commit bde545295b710bdd13a0fcd4b9fddd2383eeeb3a upstream. syzbot generated a crafted bitszbits which can be shifted out-of-bounds[1]. So directly print unsupported blkszbits instead of blksize. [1] https://lore.kernel.org/r/000000000000c72ddd05b9444d2f@google.com Link: https://lore.kernel.org/r/20210120013016.14071-1-hsiangkao@aol.com Reported-by: syzbot+c68f467cd7c45860e8d4@syzkaller.appspotmail.com Reviewed-by: Chao Yu Signed-off-by: Gao Xiang Signed-off-by: Greg Kroah-Hartman --- fs/erofs/super.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/fs/erofs/super.c +++ b/fs/erofs/super.c @@ -158,8 +158,8 @@ static int erofs_read_superblock(struct blkszbits = dsb->blkszbits; /* 9(512 bytes) + LOG_SECTORS_PER_BLOCK == LOG_BLOCK_SIZE */ if (blkszbits != LOG_BLOCK_SIZE) { - erofs_err(sb, "blksize %u isn't supported on this platform", - 1 << blkszbits); + erofs_err(sb, "blkszbits %u isn't supported on this platform", + blkszbits); goto out; }