|
KASAN: use-after-free Read in jfs_lazycommit
prio:high
jfs
|
19 |
syz, C |
error |
|
4327 |
5h02m |
1486d
|
0/29 |
never |
From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
prio:high
jfs
|
1 |
syz, C |
done |
|
4187 |
2d02h |
1227d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
general protection fault in blk_update_request
jfs
|
19 |
syz, C |
error |
|
230 |
193d |
723d
|
29/29 |
158d |
b15e4310633f
jfs: Set the lbmDone flag at the end of lbmIODone
|
|
BUG: corrupted list in dbUpdatePMap
jfs
|
8 |
syz, C |
error |
|
141 |
195d |
354d
|
29/29 |
158d |
3c778ec88208
jfs: fix corrupted list in dbUpdatePMap
|
|
INFO: task hung in filename_rmdir
jfs
|
1 |
syz, C |
error |
|
5 |
190d |
241d
|
29/29 |
158d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
INFO: task hung in filename_unlinkat
jfs
|
1 |
syz, C |
error |
|
14 |
221d |
243d
|
29/29 |
158d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
UBSAN: shift-out-of-bounds in dbSplit (3)
jfs
|
-1 |
syz, C |
|
|
8 |
229d |
543d
|
29/29 |
158d |
cce219b203c4
jfs: add dmapctl integrity check to prevent invalid operations
|
|
general protection fault in lmLogSync (2)
jfs
|
22 |
syz, C |
error |
|
8238 |
161d |
1488d
|
29/29 |
158d |
ca5848ae87d2
jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
|
|
WARNING in jfs_rename
jfs
|
-1 |
syz, C |
inconclusive |
|
13 |
303d |
535d
|
29/29 |
173d |
9218dc26fd92
jfs: nlink overflow in jfs_rename
|
|
kernel BUG in folio_set_bh (2)
ntfs3
jfs
|
-1 |
syz, C |
|
|
46 |
186d |
286d
|
29/29 |
173d |
ab7ad7abb366
romfs: check sb_set_blocksize() return value
|
|
INFO: task hung in __bread_gfp (7)
udf
jfs
|
1 |
syz, C |
done |
|
6 |
396d |
401d
|
29/29 |
361d |
ab073abf6d97
block: fix EOD return for device with nr_sectors == 0
|
|
kernel BUG in clear_inode (3)
jfs
|
-1 |
syz, C |
error |
|
637 |
420d |
501d
|
29/29 |
417d |
2d91b3765cd0
jfs: truncate good inode pages when hard link is 0
|
|
UBSAN: array-index-out-of-bounds in dbAllocAG
jfs
|
15 |
syz, C |
|
|
1 |
540d |
551d
|
29/29 |
417d |
c214006856ff
jfs: upper bound check of tree index in dbAllocAG
|
|
kernel BUG in jfs_truncate_nolock
jfs
|
-1 |
syz, C |
error |
|
5 |
497d |
510d
|
29/29 |
417d |
2d04df811642
jfs: Regular file corruption check
|
|
UBSAN: array-index-out-of-bounds in add_missing_indices
jfs
|
15 |
syz, C |
|
|
187 |
503d |
699d
|
29/29 |
475d |
5dff41a86377
jfs: fix array-index-out-of-bounds read in add_missing_indices
|
|
UBSAN: shift-out-of-bounds in dbAllocAG (2)
jfs
|
-1 |
syz, C |
done |
|
5 |
547d |
597d
|
29/29 |
475d |
37bfb464ddca
jfs: validate AG parameters in dbMount() to prevent crashes
|
|
KMSAN: uninit-value in diFree
jfs
|
7 |
syz, C |
|
|
2 |
614d |
614d
|
28/29 |
503d |
9629d7d66c62
jfs: Fix uninit-value access of imap allocated in the diMount() function
|
|
KASAN: slab-out-of-bounds Read in ea_get (4)
jfs
|
17 |
syz, C |
|
|
4 |
598d |
621d
|
28/29 |
503d |
fdf480da5837
jfs: fix slab-out-of-bounds read in ea_get()
|
|
BUG: unable to handle kernel paging request in txBeginAnon
jfs
|
11 |
syz, C |
inconclusive |
|
43 |
595d |
884d
|
28/29 |
503d |
b5799dd77054
jfs: add check read-only before truncation in jfs_truncate_nolock()
0176e69743ec
jfs: add check read-only before txBeginAnon() call
|
|
possible deadlock in diFree (2)
jfs
|
4 |
syz, C |
|
|
40 |
578d |
704d
|
28/29 |
503d |
b61e69bb1c04
jfs: Prevent copying of nlink with value 0 from disk inode
|
|
kernel BUG in clear_inode (2)
jfs
|
-1 |
syz, C |
inconclusive |
|
986 |
503d |
728d
|
28/29 |
503d |
8c3f9a70d2d4
jfs: reject on-disk inodes of an unsupported type
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst (2)
jfs
|
19 |
syz, C |
error |
|
119 |
546d |
674d
|
28/29 |
503d |
a8dfb2168906
jfs: add index corruption check to DT_GETPAGE()
|
|
divide error in dbAllocAG
jfs
|
2 |
syz, C |
done |
|
172 |
577d |
692d
|
28/29 |
503d |
ddf2846f22e8
jfs: add sanity check for agwidth in dbMount
|
|
UBSAN: array-index-out-of-bounds in jfs_readdir
jfs
|
19 |
syz, C |
inconclusive |
|
89 |
686d |
938d
|
28/29 |
679d |
839f102efb16
jfs: fix array-index-out-of-bounds in jfs_readdir
|
|
UBSAN: shift-out-of-bounds in dbSplit (2)
jfs
|
-1 |
syz, C |
error |
|
403 |
692d |
938d
|
28/29 |
679d |
a5f5e4698f8a
jfs: fix shift-out-of-bounds in dbSplit
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree (2)
jfs
|
15 |
syz, C |
inconclusive |
|
77 |
705d |
891d
|
28/29 |
679d |
a174706ba4da
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst
jfs
|
19 |
syz, C |
error |
|
200 |
681d |
908d
|
28/29 |
679d |
ca84a2c9be48
jfs: array-index-out-of-bounds fix in dtReadFirst
|
|
UBSAN: array-index-out-of-bounds in dbNextAG (2)
jfs
|
15 |
syz, C |
inconclusive |
|
53 |
767d |
837d
|
28/29 |
734d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
UBSAN: array-index-out-of-bounds in dbSplit
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
774d |
822d
|
28/29 |
734d |
d64ff0d23067
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: shift-out-of-bounds in dbFindBits
jfs
|
-1 |
syz, C |
error |
|
53 |
737d |
840d
|
28/29 |
734d |
b0b2fc815e51
jfs: UBSAN: shift-out-of-bounds in dbFindBits
|
|
KASAN: slab-use-after-free Read in dbFreeBits
jfs
|
19 |
syz, C |
done |
|
6 |
771d |
801d
|
28/29 |
734d |
d6c1b3599b2f
jfs: Fix uaf in dbFreeBits
|
|
general protection fault in dtInsertEntry
jfs
|
17 |
syz, C |
inconclusive |
|
501 |
805d |
930d
|
27/29 |
803d |
ce6dede912f0
jfs: fix null ptr deref in dtInsertEntry
|
|
UBSAN: array-index-out-of-bounds in diFree
jfs
|
15 |
syz, C |
inconclusive |
|
226 |
805d |
915d
|
27/29 |
803d |
f73f969b2eb3
jfs: Fix array-index-out-of-bounds in diFree
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG
jfs
|
-1 |
syz, C |
unreliable |
|
5 |
842d |
857d
|
27/29 |
803d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
KASAN: slab-out-of-bounds Read in ea_get (2)
jfs
|
17 |
syz, C |
|
|
33 |
841d |
906d
|
26/29 |
839d |
7c55b78818cf
jfs: xattr: fix buffer overflow for invalid xattr
|
|
INFO: task hung in deactivate_super (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
121 |
967d |
1306d
|
25/29 |
931d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry
jfs
|
19 |
syz, C |
error |
done |
29 |
997d |
1491d
|
25/29 |
950d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: trying to register non-static key in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
20 |
1023d |
1121d
|
25/29 |
950d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in jfs_readdir
jfs
|
19 |
syz, C |
error |
done |
17 |
1022d |
1383d
|
25/29 |
950d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in lmLogClose (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
5 |
1020d |
1112d
|
25/29 |
975d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __get_metapage
jfs
|
1 |
syz, C |
error |
done |
32 |
1022d |
1476d
|
25/29 |
978d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txLock
jfs
|
-1 |
syz, C |
inconclusive |
done |
10 |
1025d |
1143d
|
25/29 |
983d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dtSearch
jfs
|
19 |
syz, C |
error |
done |
33 |
1028d |
1492d
|
25/29 |
986d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbSplit
jfs
|
-1 |
syz, C |
error |
done |
7 |
1029d |
1483d
|
25/29 |
990d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in path_mount (2)
jfs
|
1 |
syz, C |
error |
done |
8 |
1035d |
1164d
|
25/29 |
999d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in jfs_evict_inode
jfs
|
19 |
syz |
error |
|
1 |
1099d |
1095d
|
25/29 |
1000d |
e0e1958f4c36
jfs: fix uaf in jfs_evict_inode
|
|
UBSAN: array-index-out-of-bounds in diNewExt
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
1000d |
1051d
|
25/29 |
1000d |
49f9637aafa6
jfs: fix array-index-out-of-bounds in diNewExt
|
|
general protection fault in dtSplitUp
jfs
|
2 |
syz, C |
error |
done |
2 |
1049d |
1486d
|
25/29 |
1000d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in diWrite
jfs
|
15 |
syz, C |
error |
done |
13 |
1046d |
1466d
|
25/29 |
1000d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ea_get
jfs
|
-1 |
syz, C |
error |
done |
10 |
1042d |
1488d
|
25/29 |
1000d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in dtSplitRoot
jfs
|
15 |
syz, C |
error |
inconclusive |
2 |
1144d |
1472d
|
25/29 |
1000d |
27e56f59bab5
UBSAN: array-index-out-of-bounds in dtSplitRoot
|
|
kernel BUG in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
6 |
1010d |
1224d
|
25/29 |
1000d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbJoin
jfs
|
-1 |
syz, C |
error |
|
3 |
1093d |
1477d
|
25/29 |
1000d |
cca974daeb6c
jfs: fix shift-out-of-bounds in dbJoin
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
jfs
|
15 |
syz, C |
error |
error |
41 |
1013d |
1491d
|
25/29 |
1000d |
9862ec7ac1cb
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
74ecdda68242
jfs: fix array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in xtSearch
jfs
|
15 |
syz, C |
unreliable |
done |
122 |
1065d |
1483d
|
25/29 |
1022d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in txCommit
jfs
|
15 |
syz, C |
error |
done |
396 |
1089d |
1470d
|
25/29 |
1022d |
a779ed754e52
jfs: define xtree root and page independently
|
|
general protection fault in lbmStartIO
jfs
|
2 |
syz, C |
done |
|
2 |
1107d |
1114d
|
25/29 |
1040d |
6306ff39a7fc
jfs: fix log->bdev_handle null ptr deref in lbmStartIO
|
|
UBSAN: shift-out-of-bounds in dbAlloc (2)
jfs
|
-1 |
|
|
|
1 |
1138d |
1134d
|
25/29 |
1040d |
525b861a0081
fs/jfs: Add check for negative db_l2nbperpage
|
|
UBSAN: array-index-out-of-bounds in diAlloc
jfs
|
15 |
syz, C |
error |
inconclusive |
37 |
1080d |
1490d
|
25/29 |
1040d |
05d9ea1ceb62
jfs: fix array-index-out-of-bounds in diAlloc
|
|
UBSAN: array-index-out-of-bounds in dbFindLeaf
jfs
|
15 |
syz, C |
error |
|
6 |
1140d |
1454d
|
25/29 |
1040d |
22cad8bc1d36
jfs: fix array-index-out-of-bounds in dbFindLeaf
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
jfs
|
15 |
syz, C |
inconclusive |
inconclusive |
52 |
1063d |
1491d
|
25/29 |
1040d |
64933ab7b048
fs/jfs: Add validity check for db_maxag and db_agpref
|
|
KASAN: invalid-free in dbUnmount
jfs
|
24 |
syz |
error |
|
119 |
1127d |
1386d
|
23/29 |
1110d |
cade5397e546
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
|
|
KASAN: null-ptr-deref Read in txBegin
jfs
|
11 |
syz, C |
error |
|
30 |
1211d |
1346d
|
23/29 |
1110d |
47cfdc338d67
FS: JFS: Fix null-ptr-deref Read in txBegin
|
|
UBSAN: array-index-out-of-bounds in dbAllocDmapLev
jfs
|
15 |
syz, C |
error |
|
2 |
1230d |
1403d
|
23/29 |
1110d |
4e302336d5ca
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
|
|
UBSAN: shift-out-of-bounds in dbFree
jfs
|
-1 |
syz, C |
error |
|
3 |
1250d |
1316d
|
23/29 |
1110d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in diUnmount
jfs
|
-1 |
syz, C |
error |
|
100 |
1137d |
1430d
|
23/29 |
1110d |
6e2bda2c192d
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
UBSAN: shift-out-of-bounds in extAlloc
jfs
|
-1 |
syz, C |
error |
|
6605 |
1131d |
1491d
|
23/29 |
1110d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
UBSAN: shift-out-of-bounds in blkstol2
jfs
|
-1 |
syz, C |
error |
|
2 |
1455d |
1455d
|
22/29 |
1236d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbAllocBits
jfs
|
-1 |
syz, C |
error |
done |
4 |
1344d |
1477d
|
22/29 |
1236d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbFindCtl
jfs
|
-1 |
syz, C |
inconclusive |
done |
45 |
1336d |
1478d
|
22/29 |
1236d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
divide error in dbNextAG
jfs
|
2 |
syz |
error |
|
2 |
1686d |
1682d
|
22/29 |
1340d |
2cc7cc01c15f
jfs: fix divide error in dbNextAG
|
|
UBSAN: shift-out-of-bounds in dbAllocAG
jfs
|
-1 |
syz, C |
error |
|
10 |
1457d |
1489d
|
22/29 |
1340d |
898f70669568
fs: jfs: fix shift-out-of-bounds in dbAllocAG
|
|
WARNING in jfs_symlink
jfs
|
-1 |
syz, C |
|
|
12 |
1461d |
1472d
|
22/29 |
1340d |
ebe060369f8d
jfs: Fix fortify moan in symlink
|
|
BUG: unable to handle kernel paging request in diFree
jfs
|
8 |
syz, C |
done |
|
13 |
1948d |
2219d
|
20/29 |
1811d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
UBSAN: shift-out-of-bounds in chkSuper
jfs
|
-1 |
syz, C |
unreliable |
|
28 |
2074d |
2140d
|
20/29 |
2026d |
3bef198f1b17
JFS: more checks for invalid superblock
|