|
KASAN: use-after-free Read in jfs_lazycommit
prio:high
jfs
|
19 |
syz, C |
error |
|
4242 |
26m |
1423d
|
0/29 |
never |
From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
prio:high
jfs
|
1 |
syz, C |
done |
|
4177 |
7d00h |
1164d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
general protection fault in blk_update_request
jfs
|
19 |
syz, C |
error |
|
230 |
130d |
660d
|
29/29 |
95d |
b15e4310633f
jfs: Set the lbmDone flag at the end of lbmIODone
|
|
BUG: corrupted list in dbUpdatePMap
jfs
|
8 |
syz, C |
error |
|
141 |
132d |
291d
|
29/29 |
95d |
3c778ec88208
jfs: fix corrupted list in dbUpdatePMap
|
|
INFO: task hung in filename_rmdir
jfs
|
1 |
syz, C |
error |
|
5 |
127d |
178d
|
29/29 |
95d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
INFO: task hung in filename_unlinkat
jfs
|
1 |
syz, C |
error |
|
14 |
158d |
180d
|
29/29 |
95d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
UBSAN: shift-out-of-bounds in dbSplit (3)
jfs
|
-1 |
syz, C |
|
|
8 |
166d |
481d
|
29/29 |
95d |
cce219b203c4
jfs: add dmapctl integrity check to prevent invalid operations
|
|
general protection fault in lmLogSync (2)
jfs
|
22 |
syz, C |
error |
|
8238 |
98d |
1425d
|
29/29 |
95d |
ca5848ae87d2
jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
|
|
WARNING in jfs_rename
jfs
|
-1 |
syz, C |
inconclusive |
|
13 |
240d |
472d
|
29/29 |
110d |
9218dc26fd92
jfs: nlink overflow in jfs_rename
|
|
kernel BUG in folio_set_bh (2)
ntfs3
jfs
|
-1 |
syz, C |
|
|
46 |
123d |
223d
|
29/29 |
110d |
ab7ad7abb366
romfs: check sb_set_blocksize() return value
|
|
INFO: task hung in __bread_gfp (7)
udf
jfs
|
1 |
syz, C |
done |
|
6 |
333d |
338d
|
29/29 |
299d |
ab073abf6d97
block: fix EOD return for device with nr_sectors == 0
|
|
kernel BUG in clear_inode (3)
jfs
|
-1 |
syz, C |
error |
|
637 |
357d |
438d
|
29/29 |
354d |
2d91b3765cd0
jfs: truncate good inode pages when hard link is 0
|
|
UBSAN: array-index-out-of-bounds in dbAllocAG
jfs
|
15 |
syz, C |
|
|
1 |
478d |
488d
|
29/29 |
354d |
c214006856ff
jfs: upper bound check of tree index in dbAllocAG
|
|
kernel BUG in jfs_truncate_nolock
jfs
|
-1 |
syz, C |
error |
|
5 |
434d |
447d
|
29/29 |
354d |
2d04df811642
jfs: Regular file corruption check
|
|
UBSAN: array-index-out-of-bounds in add_missing_indices
jfs
|
15 |
syz, C |
|
|
187 |
440d |
636d
|
29/29 |
412d |
5dff41a86377
jfs: fix array-index-out-of-bounds read in add_missing_indices
|
|
UBSAN: shift-out-of-bounds in dbAllocAG (2)
jfs
|
-1 |
syz, C |
done |
|
5 |
484d |
534d
|
29/29 |
412d |
37bfb464ddca
jfs: validate AG parameters in dbMount() to prevent crashes
|
|
KMSAN: uninit-value in diFree
jfs
|
7 |
syz, C |
|
|
2 |
551d |
551d
|
28/29 |
440d |
9629d7d66c62
jfs: Fix uninit-value access of imap allocated in the diMount() function
|
|
KASAN: slab-out-of-bounds Read in ea_get (4)
jfs
|
17 |
syz, C |
|
|
4 |
535d |
558d
|
28/29 |
440d |
fdf480da5837
jfs: fix slab-out-of-bounds read in ea_get()
|
|
BUG: unable to handle kernel paging request in txBeginAnon
jfs
|
11 |
syz, C |
inconclusive |
|
43 |
532d |
822d
|
28/29 |
440d |
b5799dd77054
jfs: add check read-only before truncation in jfs_truncate_nolock()
0176e69743ec
jfs: add check read-only before txBeginAnon() call
|
|
possible deadlock in diFree (2)
jfs
|
4 |
syz, C |
|
|
40 |
515d |
641d
|
28/29 |
440d |
b61e69bb1c04
jfs: Prevent copying of nlink with value 0 from disk inode
|
|
kernel BUG in clear_inode (2)
jfs
|
-1 |
syz, C |
inconclusive |
|
986 |
440d |
665d
|
28/29 |
440d |
8c3f9a70d2d4
jfs: reject on-disk inodes of an unsupported type
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst (2)
jfs
|
19 |
syz, C |
error |
|
119 |
483d |
611d
|
28/29 |
440d |
a8dfb2168906
jfs: add index corruption check to DT_GETPAGE()
|
|
divide error in dbAllocAG
jfs
|
2 |
syz, C |
done |
|
172 |
514d |
629d
|
28/29 |
440d |
ddf2846f22e8
jfs: add sanity check for agwidth in dbMount
|
|
UBSAN: array-index-out-of-bounds in jfs_readdir
jfs
|
19 |
syz, C |
inconclusive |
|
89 |
623d |
875d
|
28/29 |
616d |
839f102efb16
jfs: fix array-index-out-of-bounds in jfs_readdir
|
|
UBSAN: shift-out-of-bounds in dbSplit (2)
jfs
|
-1 |
syz, C |
error |
|
403 |
629d |
875d
|
28/29 |
616d |
a5f5e4698f8a
jfs: fix shift-out-of-bounds in dbSplit
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree (2)
jfs
|
15 |
syz, C |
inconclusive |
|
77 |
642d |
828d
|
28/29 |
616d |
a174706ba4da
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst
jfs
|
19 |
syz, C |
error |
|
200 |
618d |
845d
|
28/29 |
616d |
ca84a2c9be48
jfs: array-index-out-of-bounds fix in dtReadFirst
|
|
UBSAN: array-index-out-of-bounds in dbNextAG (2)
jfs
|
15 |
syz, C |
inconclusive |
|
53 |
704d |
774d
|
28/29 |
671d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
UBSAN: array-index-out-of-bounds in dbSplit
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
711d |
759d
|
28/29 |
671d |
d64ff0d23067
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: shift-out-of-bounds in dbFindBits
jfs
|
-1 |
syz, C |
error |
|
53 |
674d |
777d
|
28/29 |
671d |
b0b2fc815e51
jfs: UBSAN: shift-out-of-bounds in dbFindBits
|
|
KASAN: slab-use-after-free Read in dbFreeBits
jfs
|
19 |
syz, C |
done |
|
6 |
708d |
738d
|
28/29 |
671d |
d6c1b3599b2f
jfs: Fix uaf in dbFreeBits
|
|
general protection fault in dtInsertEntry
jfs
|
17 |
syz, C |
inconclusive |
|
501 |
742d |
867d
|
27/29 |
740d |
ce6dede912f0
jfs: fix null ptr deref in dtInsertEntry
|
|
UBSAN: array-index-out-of-bounds in diFree
jfs
|
15 |
syz, C |
inconclusive |
|
226 |
742d |
852d
|
27/29 |
740d |
f73f969b2eb3
jfs: Fix array-index-out-of-bounds in diFree
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG
jfs
|
-1 |
syz, C |
unreliable |
|
5 |
779d |
794d
|
27/29 |
740d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
KASAN: slab-out-of-bounds Read in ea_get (2)
jfs
|
17 |
syz, C |
|
|
33 |
778d |
843d
|
26/29 |
776d |
7c55b78818cf
jfs: xattr: fix buffer overflow for invalid xattr
|
|
INFO: task hung in deactivate_super (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
121 |
904d |
1243d
|
25/29 |
868d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry
jfs
|
19 |
syz, C |
error |
done |
29 |
934d |
1428d
|
25/29 |
887d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: trying to register non-static key in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
20 |
960d |
1058d
|
25/29 |
887d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in jfs_readdir
jfs
|
19 |
syz, C |
error |
done |
17 |
959d |
1320d
|
25/29 |
887d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in lmLogClose (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
5 |
957d |
1049d
|
25/29 |
912d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __get_metapage
jfs
|
1 |
syz, C |
error |
done |
32 |
959d |
1413d
|
25/29 |
915d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txLock
jfs
|
-1 |
syz, C |
inconclusive |
done |
10 |
962d |
1080d
|
25/29 |
920d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dtSearch
jfs
|
19 |
syz, C |
error |
done |
33 |
965d |
1429d
|
25/29 |
923d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbSplit
jfs
|
-1 |
syz, C |
error |
done |
7 |
966d |
1420d
|
25/29 |
927d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in path_mount (2)
jfs
|
1 |
syz, C |
error |
done |
8 |
972d |
1101d
|
25/29 |
936d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in jfs_evict_inode
jfs
|
19 |
syz |
error |
|
1 |
1036d |
1032d
|
25/29 |
937d |
e0e1958f4c36
jfs: fix uaf in jfs_evict_inode
|
|
UBSAN: array-index-out-of-bounds in diNewExt
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
937d |
988d
|
25/29 |
937d |
49f9637aafa6
jfs: fix array-index-out-of-bounds in diNewExt
|
|
general protection fault in dtSplitUp
jfs
|
2 |
syz, C |
error |
done |
2 |
986d |
1423d
|
25/29 |
937d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in diWrite
jfs
|
15 |
syz, C |
error |
done |
13 |
983d |
1403d
|
25/29 |
937d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ea_get
jfs
|
-1 |
syz, C |
error |
done |
10 |
979d |
1425d
|
25/29 |
937d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in dtSplitRoot
jfs
|
15 |
syz, C |
error |
inconclusive |
2 |
1081d |
1409d
|
25/29 |
937d |
27e56f59bab5
UBSAN: array-index-out-of-bounds in dtSplitRoot
|
|
kernel BUG in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
6 |
947d |
1161d
|
25/29 |
937d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbJoin
jfs
|
-1 |
syz, C |
error |
|
3 |
1030d |
1414d
|
25/29 |
937d |
cca974daeb6c
jfs: fix shift-out-of-bounds in dbJoin
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
jfs
|
15 |
syz, C |
error |
error |
41 |
950d |
1428d
|
25/29 |
937d |
9862ec7ac1cb
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
74ecdda68242
jfs: fix array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in xtSearch
jfs
|
15 |
syz, C |
unreliable |
done |
122 |
1002d |
1420d
|
25/29 |
959d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in txCommit
jfs
|
15 |
syz, C |
error |
done |
396 |
1026d |
1407d
|
25/29 |
959d |
a779ed754e52
jfs: define xtree root and page independently
|
|
general protection fault in lbmStartIO
jfs
|
2 |
syz, C |
done |
|
2 |
1044d |
1051d
|
25/29 |
977d |
6306ff39a7fc
jfs: fix log->bdev_handle null ptr deref in lbmStartIO
|
|
UBSAN: shift-out-of-bounds in dbAlloc (2)
jfs
|
-1 |
|
|
|
1 |
1075d |
1071d
|
25/29 |
977d |
525b861a0081
fs/jfs: Add check for negative db_l2nbperpage
|
|
UBSAN: array-index-out-of-bounds in diAlloc
jfs
|
15 |
syz, C |
error |
inconclusive |
37 |
1017d |
1427d
|
25/29 |
977d |
05d9ea1ceb62
jfs: fix array-index-out-of-bounds in diAlloc
|
|
UBSAN: array-index-out-of-bounds in dbFindLeaf
jfs
|
15 |
syz, C |
error |
|
6 |
1077d |
1391d
|
25/29 |
977d |
22cad8bc1d36
jfs: fix array-index-out-of-bounds in dbFindLeaf
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
jfs
|
15 |
syz, C |
inconclusive |
inconclusive |
52 |
1000d |
1428d
|
25/29 |
977d |
64933ab7b048
fs/jfs: Add validity check for db_maxag and db_agpref
|
|
KASAN: invalid-free in dbUnmount
jfs
|
24 |
syz |
error |
|
119 |
1064d |
1323d
|
23/29 |
1047d |
cade5397e546
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
|
|
KASAN: null-ptr-deref Read in txBegin
jfs
|
11 |
syz, C |
error |
|
30 |
1148d |
1283d
|
23/29 |
1047d |
47cfdc338d67
FS: JFS: Fix null-ptr-deref Read in txBegin
|
|
UBSAN: array-index-out-of-bounds in dbAllocDmapLev
jfs
|
15 |
syz, C |
error |
|
2 |
1167d |
1340d
|
23/29 |
1047d |
4e302336d5ca
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
|
|
UBSAN: shift-out-of-bounds in dbFree
jfs
|
-1 |
syz, C |
error |
|
3 |
1187d |
1253d
|
23/29 |
1047d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in diUnmount
jfs
|
-1 |
syz, C |
error |
|
100 |
1074d |
1367d
|
23/29 |
1047d |
6e2bda2c192d
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
UBSAN: shift-out-of-bounds in extAlloc
jfs
|
-1 |
syz, C |
error |
|
6605 |
1068d |
1428d
|
23/29 |
1047d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
UBSAN: shift-out-of-bounds in blkstol2
jfs
|
-1 |
syz, C |
error |
|
2 |
1392d |
1392d
|
22/29 |
1173d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbAllocBits
jfs
|
-1 |
syz, C |
error |
done |
4 |
1281d |
1414d
|
22/29 |
1173d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbFindCtl
jfs
|
-1 |
syz, C |
inconclusive |
done |
45 |
1273d |
1415d
|
22/29 |
1173d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
divide error in dbNextAG
jfs
|
2 |
syz |
error |
|
2 |
1623d |
1619d
|
22/29 |
1277d |
2cc7cc01c15f
jfs: fix divide error in dbNextAG
|
|
UBSAN: shift-out-of-bounds in dbAllocAG
jfs
|
-1 |
syz, C |
error |
|
10 |
1394d |
1426d
|
22/29 |
1277d |
898f70669568
fs: jfs: fix shift-out-of-bounds in dbAllocAG
|
|
WARNING in jfs_symlink
jfs
|
-1 |
syz, C |
|
|
12 |
1398d |
1409d
|
22/29 |
1277d |
ebe060369f8d
jfs: Fix fortify moan in symlink
|
|
BUG: unable to handle kernel paging request in diFree
jfs
|
8 |
syz, C |
done |
|
13 |
1885d |
2156d
|
20/29 |
1748d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
UBSAN: shift-out-of-bounds in chkSuper
jfs
|
-1 |
syz, C |
unreliable |
|
28 |
2011d |
2077d
|
20/29 |
1963d |
3bef198f1b17
JFS: more checks for invalid superblock
|