Dan Carpenter 669b0cb81e fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() ... The "arg->vec_len" variable is a u64 that comes from the user at the start of the function. The "arg->vec_len * sizeof(struct page_region))" multiplication can lead to integer wrapping. Use size_mul() to avoid that. Also the size_add/mul() functions work on unsigned long so for 32bit systems we need to ensure that "arg->vec_len" fits in an unsigned long. Link: https://lkml.kernel.org/r/39d41335-dd4d-48ed-8a7f-402c57d8ea84@stanley.mountain Fixes: 52526ca7fd ("fs/proc/task_mmu: implement IOCTL to get and optionally clear info about PTEs") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Cc: Andrei Vagin <avagin@google.com> Cc: Andrii Nakryiko <andrii@kernel.org> Cc: Arnd Bergmann <arnd@arndb.de> Cc: David Hildenbrand <david@redhat.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Michał Mirosław <mirq-linux@rere.qmqm.pl> Cc: Muhammad Usama Anjum <usama.anjum@collabora.com> Cc: Oscar Salvador <osalvador@suse.de> Cc: Peter Xu <peterx@redhat.com> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org>		2024-11-14 22:43:48 -08:00
..
9p	Revert patches causing inode collision problems	2024-10-25 15:25:02 -07:00
adfs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
affs	affs-for-6.12-tag	2024-09-16 13:07:59 +02:00
afs	vfs-6.12-rc6.fixes	2024-11-01 07:37:10 -10:00
autofs	autofs: fix thinko in validate_dev_ioctl()	2024-10-28 13:16:56 +01:00
bcachefs	bcachefs fixes for 6.12-rc6	2024-11-01 07:21:03 -10:00
befs
bfs
btrfs	for-6.12-rc5-tag	2024-11-01 07:31:47 -10:00
cachefiles	cachefiles: fix dentry leak in cachefiles_open_file()	2024-09-27 18:29:19 +02:00
ceph	A fix from Patrick for a variety of CephFS lockup scenarios caused by	2024-10-04 10:10:23 -07:00
coda
configfs
cramfs
crypto	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
debugfs	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
devpts
dlm	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
ecryptfs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
efivarfs	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
efs
erofs	erofs: use get_tree_bdev_flags() to avoid misleading messages	2024-10-21 14:30:27 +02:00
exfat	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
exportfs
ext2	vfs-6.12.file	2024-09-16 09:14:02 +02:00
ext4	ext4: fix off by one issue in alloc_flex_gd()	2024-10-04 17:36:28 -04:00
f2fs	f2fs: allow parallel DIO reads	2024-10-11 15:12:07 +00:00
fat	fat: fix uninitialized variable	2024-10-17 00:28:06 -07:00
freevxfs
fuse	fuse: remove stray debug line	2024-10-25 17:05:49 +02:00
gfs2	gfs2 changes	2024-09-23 11:55:17 -07:00
hfs
hfsplus	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
hostfs
hpfs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
hugetlbfs
iomap	vfs-6.12-rc6.iomap	2024-11-01 07:45:00 -10:00
isofs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
jbd2	jbd2: remove unneeded check of ret in jbd2_fc_get_buf	2024-08-26 23:49:15 -04:00
jffs2
jfs	jfs: Fix sanity check in dbMount	2024-10-22 09:40:37 -05:00
kernfs
lockd	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
minix
netfs	netfs: Downgrade i_rwsem for a buffered write	2024-10-17 15:33:42 +02:00
nfs	NFS: remove revoked delegation from server's delegation list	2024-10-09 15:39:22 -04:00
nfs_common	nfs_common: fix race in NFS calls to nfsd_file_put_local() and nfsd_serv_put()	2024-10-03 16:19:43 -04:00
nfsd	nfsd-6.12 fixes:	2024-11-02 09:27:11 -10:00
nilfs2	nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint	2024-11-11 17:20:23 -08:00
nls	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
notify	inotify: Fix possible deadlock in fsnotify_destroy_mark	2024-10-02 15:14:29 +02:00
ntfs3	Changes for 6.12-rc3	2024-10-08 10:53:06 -07:00
ocfs2	ocfs2: fix UBSAN warning in ocfs2_verify_volume()	2024-11-11 17:20:23 -08:00
omfs
openpromfs
orangefs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
overlayfs	fs: pass offset and result to backing_file end_write() callback	2024-10-16 13:17:45 +02:00
proc	fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()	2024-11-14 22:43:48 -08:00
pstore	drm next for 6.12-rc1	2024-09-19 10:18:15 +02:00
qnx4
qnx6
quota	\n	2024-09-23 10:49:28 -07:00
ramfs
reiserfs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
romfs
smb	cifs: fix warning when destroy 'cifs_io_request_pool'	2024-10-23 07:42:44 -05:00
squashfs	Squashfs: fix variable overflow in squashfs_readpage_block	2024-10-30 20:14:12 -07:00
sysfs
sysv
tests
tracefs	eventfs: Use list_del_rcu() for SRCU protected list variable	2024-09-05 10:18:48 -04:00
ubifs	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
udf	udf: fix uninit-value use in udf_get_fileshortad	2024-10-02 14:32:37 +02:00
ufs	ufs_rename(): fix bogus argument of folio_release_kmap()	2024-10-02 00:05:09 -04:00
unicode	unicode: Don't special case ignorable code points	2024-10-09 13:34:01 -04:00
vboxsf
verity
xfs	XFS bug fies for 6.12-rc6	2024-11-02 09:22:16 -10:00
zonefs	zonefs fixes for 6.12-rc2	2024-10-02 12:02:15 -07:00
aio.c
anon_inodes.c
attr.c	nfsd-6.11 fixes:	2024-08-29 06:20:44 +12:00
backing-file.c	fs: pass offset and result to backing_file end_write() callback	2024-10-16 13:17:45 +02:00
bad_inode.c
binfmt_elf_fdpic.c	binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined	2024-08-26 13:00:38 -07:00
binfmt_elf.c	Revert "binfmt_elf, coredump: Log the reason of the failed core dumps"	2024-09-26 11:39:02 -07:00
binfmt_flat.c	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
binfmt_misc.c
binfmt_script.c
bpf_fs_kfuncs.c
buffer.c	vfs-6.12.folio	2024-09-16 08:54:30 +02:00
char_dev.c
compat_binfmt_elf.c
coredump.c	Revert "binfmt_elf, coredump: Log the reason of the failed core dumps"	2024-09-26 11:39:02 -07:00
d_path.c
dax.c	fsdax: dax_unshare_iter needs to copy entire blocks	2024-10-07 13:51:47 +02:00
dcache.c	vfs-6.12.misc	2024-09-16 08:35:09 +02:00
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
exec.c	ALong with the usual shower of singleton patches, notable patch series in	2024-09-21 07:29:05 -07:00
fcntl.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
fhandle.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
file_table.c	slab updates for 6.12	2024-09-18 08:53:53 +02:00
file.c	close_range(): fix the logics in descriptor table trimming	2024-09-29 21:52:29 -04:00
filesystems.c
fs_context.c
fs_parser.c
fs_pin.c
fs_struct.c
fs_types.c
fs-writeback.c	inode: port __I_SYNC to var event	2024-08-30 08:22:39 +02:00
fsopen.c	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
init.c
inode.c	bcachefs: do not use PF_MEMALLOC_NORECLAIM	2024-10-09 12:47:18 -07:00
internal.h	file: reclaim 24 bytes from f_owner	2024-08-28 13:05:39 +02:00
ioctl.c
Kconfig	nfs_common: fix Kconfig for NFS_COMMON_LOCALIO_SUPPORT	2024-10-03 16:19:51 -04:00
Kconfig.binfmt
kernel_read_file.c
libfs.c	vfs-6.12.folio	2024-09-16 08:54:30 +02:00
locks.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
Makefile
mbcache.c
mnt_idmapping.c	fuse update for 6.12	2024-09-24 15:29:42 -07:00
mount.h	vfs-6.12.mount	2024-09-16 11:15:26 +02:00
mpage.c
namei.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
namespace.c	fs: don't try and remove empty rbtree node	2024-10-17 15:33:43 +02:00
nsfs.c	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
open.c	openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)	2024-10-10 12:09:03 +02:00
pidfs.c	pidfs: check for valid pid namespace	2024-09-27 18:29:19 +02:00
pipe.c	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
pnode.c
pnode.h
posix_acl.c	fs: Use in_group_or_capable() helper to simplify the code	2024-08-30 08:22:37 +02:00
proc_namespace.c
read_write.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
readdir.c
remap_range.c
select.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
seq_file.c
signalfd.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
splice.c
stack.c
stat.c
statfs.c
super.c	fs/super.c: introduce get_tree_bdev_flags()	2024-10-21 14:30:26 +02:00
sync.c
sysctls.c
timerfd.c
userfaultfd.c	fork: do not invoke uffd on fork if error occurs	2024-10-28 21:40:38 -07:00
utimes.c
xattr.c