Skip to content

omfs: fix divide-by-zero on mount and bitmap slab-out-of-bounds accesses - #2630

Closed
vfsci-bot[bot] wants to merge 1 commit into
vfs.base.cifrom
pw/1169476/vfs.base.ci
Closed

vfsci-bot[bot] wants to merge 1 commit into
vfs.base.cifrom
pw/1169476/vfs.base.ci

Conversation

@vfsci-bot

@vfsci-bot vfsci-bot Bot commented Sep 20, 2026

Copy link
Copy Markdown

Series: https://patchwork.kernel.org/project/linux-fsdevel/list/?series=1169476
Submitter: Hui Peng
Version: 1
Patches: 1/1
Message-ID: <20260919222622.3797224-1-benquike@gmail.com>
Base: vfs.base.ci
Lore: https://lore.kernel.org/linux-fsdevel/20260919222622.3797224-1-benquike@gmail.com


Automated by ml2pr

Fix three bugs in fs/omfs/:

1. In omfs_fill_super() and omfs_get_bucket() (fs/omfs/inode.c,
   fs/omfs/dir.c), validate s_mirrors > 0 and s_sys_blocksize large
   enough that nbuckets > 0, preventing a hardware divide-by-zero (#DE)
   trap, and fix the error path so sbi->s_imap is not double-freed.
2. In omfs_count_free(), omfs_allocate_block(), and set_run()
   (fs/omfs/bitmap.c), bounds-check bitmap block indices against
   sbi->s_imap_size and clamp bit runs to the block size.

Fixes: 555e377 ("omfs: add inode routines")
Assisted-by: LLM
Signed-off-by: Hui Peng <benquike@gmail.com>
@vfsci-bot

vfsci-bot Bot commented Oct 4, 2026

Copy link
Copy Markdown
Author

This PR is older than 14 days. Closing automatically. If the series is still relevant, a new version will create a new PR.


Automated by ml2pr

@vfsci-bot vfsci-bot Bot closed this Oct 4, 2026
@vfsci-bot
vfsci-bot Bot deleted the pw/1169476/vfs.base.ci branch October 4, 2026 05:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant