|
KASAN: use-after-free Read in jfs_lazycommit
prio:high
jfs
|
19 |
syz, C |
error |
|
4211 |
1d08h |
1403d
|
0/29 |
never |
From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
prio:high
jfs
|
1 |
syz, C |
done |
|
4176 |
27d |
1144d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
general protection fault in blk_update_request
jfs
|
19 |
syz, C |
error |
|
230 |
110d |
640d
|
29/29 |
75d |
b15e4310633f
jfs: Set the lbmDone flag at the end of lbmIODone
|
|
BUG: corrupted list in dbUpdatePMap
jfs
|
8 |
syz, C |
error |
|
141 |
112d |
271d
|
29/29 |
75d |
3c778ec88208
jfs: fix corrupted list in dbUpdatePMap
|
|
INFO: task hung in filename_rmdir
jfs
|
1 |
syz, C |
error |
|
5 |
107d |
158d
|
29/29 |
75d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
INFO: task hung in filename_unlinkat
jfs
|
1 |
syz, C |
error |
|
14 |
138d |
160d
|
29/29 |
75d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
UBSAN: shift-out-of-bounds in dbSplit (3)
jfs
|
-1 |
syz, C |
|
|
8 |
146d |
460d
|
29/29 |
75d |
cce219b203c4
jfs: add dmapctl integrity check to prevent invalid operations
|
|
general protection fault in lmLogSync (2)
jfs
|
22 |
syz, C |
error |
|
8238 |
78d |
1404d
|
29/29 |
75d |
ca5848ae87d2
jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
|
|
WARNING in jfs_rename
jfs
|
-1 |
syz, C |
inconclusive |
|
13 |
220d |
452d
|
29/29 |
90d |
9218dc26fd92
jfs: nlink overflow in jfs_rename
|
|
kernel BUG in folio_set_bh (2)
ntfs3
jfs
|
-1 |
syz, C |
|
|
46 |
103d |
203d
|
29/29 |
90d |
ab7ad7abb366
romfs: check sb_set_blocksize() return value
|
|
INFO: task hung in __bread_gfp (7)
udf
jfs
|
1 |
syz, C |
done |
|
6 |
313d |
318d
|
29/29 |
278d |
ab073abf6d97
block: fix EOD return for device with nr_sectors == 0
|
|
kernel BUG in clear_inode (3)
jfs
|
-1 |
syz, C |
error |
|
637 |
337d |
418d
|
29/29 |
334d |
2d91b3765cd0
jfs: truncate good inode pages when hard link is 0
|
|
UBSAN: array-index-out-of-bounds in dbAllocAG
jfs
|
15 |
syz, C |
|
|
1 |
457d |
467d
|
29/29 |
334d |
c214006856ff
jfs: upper bound check of tree index in dbAllocAG
|
|
kernel BUG in jfs_truncate_nolock
jfs
|
-1 |
syz, C |
error |
|
5 |
414d |
427d
|
29/29 |
334d |
2d04df811642
jfs: Regular file corruption check
|
|
UBSAN: array-index-out-of-bounds in add_missing_indices
jfs
|
15 |
syz, C |
|
|
187 |
420d |
616d
|
29/29 |
392d |
5dff41a86377
jfs: fix array-index-out-of-bounds read in add_missing_indices
|
|
UBSAN: shift-out-of-bounds in dbAllocAG (2)
jfs
|
-1 |
syz, C |
done |
|
5 |
464d |
514d
|
29/29 |
392d |
37bfb464ddca
jfs: validate AG parameters in dbMount() to prevent crashes
|
|
KMSAN: uninit-value in diFree
jfs
|
7 |
syz, C |
|
|
2 |
531d |
531d
|
28/29 |
420d |
9629d7d66c62
jfs: Fix uninit-value access of imap allocated in the diMount() function
|
|
KASAN: slab-out-of-bounds Read in ea_get (4)
jfs
|
17 |
syz, C |
|
|
4 |
514d |
538d
|
28/29 |
420d |
fdf480da5837
jfs: fix slab-out-of-bounds read in ea_get()
|
|
BUG: unable to handle kernel paging request in txBeginAnon
jfs
|
11 |
syz, C |
inconclusive |
|
43 |
512d |
801d
|
28/29 |
420d |
b5799dd77054
jfs: add check read-only before truncation in jfs_truncate_nolock()
0176e69743ec
jfs: add check read-only before txBeginAnon() call
|
|
possible deadlock in diFree (2)
jfs
|
4 |
syz, C |
|
|
40 |
495d |
621d
|
28/29 |
420d |
b61e69bb1c04
jfs: Prevent copying of nlink with value 0 from disk inode
|
|
kernel BUG in clear_inode (2)
jfs
|
-1 |
syz, C |
inconclusive |
|
986 |
420d |
645d
|
28/29 |
420d |
8c3f9a70d2d4
jfs: reject on-disk inodes of an unsupported type
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst (2)
jfs
|
19 |
syz, C |
error |
|
119 |
463d |
591d
|
28/29 |
420d |
a8dfb2168906
jfs: add index corruption check to DT_GETPAGE()
|
|
divide error in dbAllocAG
jfs
|
2 |
syz, C |
done |
|
172 |
494d |
609d
|
28/29 |
420d |
ddf2846f22e8
jfs: add sanity check for agwidth in dbMount
|
|
UBSAN: array-index-out-of-bounds in jfs_readdir
jfs
|
19 |
syz, C |
inconclusive |
|
89 |
603d |
855d
|
28/29 |
596d |
839f102efb16
jfs: fix array-index-out-of-bounds in jfs_readdir
|
|
UBSAN: shift-out-of-bounds in dbSplit (2)
jfs
|
-1 |
syz, C |
error |
|
403 |
609d |
854d
|
28/29 |
596d |
a5f5e4698f8a
jfs: fix shift-out-of-bounds in dbSplit
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree (2)
jfs
|
15 |
syz, C |
inconclusive |
|
77 |
622d |
808d
|
28/29 |
596d |
a174706ba4da
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst
jfs
|
19 |
syz, C |
error |
|
200 |
597d |
825d
|
28/29 |
596d |
ca84a2c9be48
jfs: array-index-out-of-bounds fix in dtReadFirst
|
|
UBSAN: array-index-out-of-bounds in dbNextAG (2)
jfs
|
15 |
syz, C |
inconclusive |
|
53 |
684d |
754d
|
28/29 |
651d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
UBSAN: array-index-out-of-bounds in dbSplit
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
691d |
739d
|
28/29 |
651d |
d64ff0d23067
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: shift-out-of-bounds in dbFindBits
jfs
|
-1 |
syz, C |
error |
|
53 |
653d |
757d
|
28/29 |
651d |
b0b2fc815e51
jfs: UBSAN: shift-out-of-bounds in dbFindBits
|
|
KASAN: slab-use-after-free Read in dbFreeBits
jfs
|
19 |
syz, C |
done |
|
6 |
688d |
718d
|
28/29 |
651d |
d6c1b3599b2f
jfs: Fix uaf in dbFreeBits
|
|
general protection fault in dtInsertEntry
jfs
|
17 |
syz, C |
inconclusive |
|
501 |
722d |
847d
|
27/29 |
720d |
ce6dede912f0
jfs: fix null ptr deref in dtInsertEntry
|
|
UBSAN: array-index-out-of-bounds in diFree
jfs
|
15 |
syz, C |
inconclusive |
|
226 |
722d |
832d
|
27/29 |
720d |
f73f969b2eb3
jfs: Fix array-index-out-of-bounds in diFree
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG
jfs
|
-1 |
syz, C |
unreliable |
|
5 |
758d |
774d
|
27/29 |
720d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
KASAN: slab-out-of-bounds Read in ea_get (2)
jfs
|
17 |
syz, C |
|
|
33 |
758d |
822d
|
26/29 |
755d |
7c55b78818cf
jfs: xattr: fix buffer overflow for invalid xattr
|
|
INFO: task hung in deactivate_super (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
121 |
884d |
1223d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry
jfs
|
19 |
syz, C |
error |
done |
29 |
914d |
1408d
|
25/29 |
867d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: trying to register non-static key in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
20 |
940d |
1038d
|
25/29 |
867d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in jfs_readdir
jfs
|
19 |
syz, C |
error |
done |
17 |
939d |
1300d
|
25/29 |
867d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in lmLogClose (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
5 |
937d |
1029d
|
25/29 |
892d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __get_metapage
jfs
|
1 |
syz, C |
error |
done |
32 |
939d |
1393d
|
25/29 |
894d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txLock
jfs
|
-1 |
syz, C |
inconclusive |
done |
10 |
942d |
1060d
|
25/29 |
899d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dtSearch
jfs
|
19 |
syz, C |
error |
done |
33 |
945d |
1409d
|
25/29 |
903d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbSplit
jfs
|
-1 |
syz, C |
error |
done |
7 |
946d |
1400d
|
25/29 |
906d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in path_mount (2)
jfs
|
1 |
syz, C |
error |
done |
8 |
952d |
1081d
|
25/29 |
916d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in jfs_evict_inode
jfs
|
19 |
syz |
error |
|
1 |
1016d |
1012d
|
25/29 |
917d |
e0e1958f4c36
jfs: fix uaf in jfs_evict_inode
|
|
UBSAN: array-index-out-of-bounds in diNewExt
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
917d |
968d
|
25/29 |
917d |
49f9637aafa6
jfs: fix array-index-out-of-bounds in diNewExt
|
|
general protection fault in dtSplitUp
jfs
|
2 |
syz, C |
error |
done |
2 |
966d |
1403d
|
25/29 |
917d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in diWrite
jfs
|
15 |
syz, C |
error |
done |
13 |
963d |
1383d
|
25/29 |
917d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ea_get
jfs
|
-1 |
syz, C |
error |
done |
10 |
959d |
1404d
|
25/29 |
917d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in dtSplitRoot
jfs
|
15 |
syz, C |
error |
inconclusive |
2 |
1061d |
1388d
|
25/29 |
917d |
27e56f59bab5
UBSAN: array-index-out-of-bounds in dtSplitRoot
|
|
kernel BUG in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
6 |
926d |
1141d
|
25/29 |
917d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbJoin
jfs
|
-1 |
syz, C |
error |
|
3 |
1010d |
1394d
|
25/29 |
917d |
cca974daeb6c
jfs: fix shift-out-of-bounds in dbJoin
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
jfs
|
15 |
syz, C |
error |
error |
41 |
930d |
1408d
|
25/29 |
917d |
9862ec7ac1cb
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
74ecdda68242
jfs: fix array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in xtSearch
jfs
|
15 |
syz, C |
unreliable |
done |
122 |
982d |
1400d
|
25/29 |
939d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in txCommit
jfs
|
15 |
syz, C |
error |
done |
396 |
1005d |
1387d
|
25/29 |
939d |
a779ed754e52
jfs: define xtree root and page independently
|
|
general protection fault in lbmStartIO
jfs
|
2 |
syz, C |
done |
|
2 |
1024d |
1031d
|
25/29 |
957d |
6306ff39a7fc
jfs: fix log->bdev_handle null ptr deref in lbmStartIO
|
|
UBSAN: shift-out-of-bounds in dbAlloc (2)
jfs
|
-1 |
|
|
|
1 |
1054d |
1050d
|
25/29 |
957d |
525b861a0081
fs/jfs: Add check for negative db_l2nbperpage
|
|
UBSAN: array-index-out-of-bounds in diAlloc
jfs
|
15 |
syz, C |
error |
inconclusive |
37 |
997d |
1407d
|
25/29 |
957d |
05d9ea1ceb62
jfs: fix array-index-out-of-bounds in diAlloc
|
|
UBSAN: array-index-out-of-bounds in dbFindLeaf
jfs
|
15 |
syz, C |
error |
|
6 |
1057d |
1371d
|
25/29 |
957d |
22cad8bc1d36
jfs: fix array-index-out-of-bounds in dbFindLeaf
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
jfs
|
15 |
syz, C |
inconclusive |
inconclusive |
52 |
980d |
1408d
|
25/29 |
957d |
64933ab7b048
fs/jfs: Add validity check for db_maxag and db_agpref
|
|
KASAN: invalid-free in dbUnmount
jfs
|
24 |
syz |
error |
|
119 |
1044d |
1303d
|
23/29 |
1027d |
cade5397e546
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
|
|
KASAN: null-ptr-deref Read in txBegin
jfs
|
11 |
syz, C |
error |
|
30 |
1128d |
1262d
|
23/29 |
1027d |
47cfdc338d67
FS: JFS: Fix null-ptr-deref Read in txBegin
|
|
UBSAN: array-index-out-of-bounds in dbAllocDmapLev
jfs
|
15 |
syz, C |
error |
|
2 |
1146d |
1320d
|
23/29 |
1027d |
4e302336d5ca
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
|
|
UBSAN: shift-out-of-bounds in dbFree
jfs
|
-1 |
syz, C |
error |
|
3 |
1167d |
1232d
|
23/29 |
1027d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in diUnmount
jfs
|
-1 |
syz, C |
error |
|
100 |
1054d |
1347d
|
23/29 |
1027d |
6e2bda2c192d
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
UBSAN: shift-out-of-bounds in extAlloc
jfs
|
-1 |
syz, C |
error |
|
6605 |
1048d |
1408d
|
23/29 |
1027d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
UBSAN: shift-out-of-bounds in blkstol2
jfs
|
-1 |
syz, C |
error |
|
2 |
1372d |
1372d
|
22/29 |
1153d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbAllocBits
jfs
|
-1 |
syz, C |
error |
done |
4 |
1261d |
1394d
|
22/29 |
1153d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbFindCtl
jfs
|
-1 |
syz, C |
inconclusive |
done |
45 |
1253d |
1395d
|
22/29 |
1153d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
divide error in dbNextAG
jfs
|
2 |
syz |
error |
|
2 |
1602d |
1598d
|
22/29 |
1257d |
2cc7cc01c15f
jfs: fix divide error in dbNextAG
|
|
UBSAN: shift-out-of-bounds in dbAllocAG
jfs
|
-1 |
syz, C |
error |
|
10 |
1373d |
1405d
|
22/29 |
1257d |
898f70669568
fs: jfs: fix shift-out-of-bounds in dbAllocAG
|
|
WARNING in jfs_symlink
jfs
|
-1 |
syz, C |
|
|
12 |
1378d |
1388d
|
22/29 |
1257d |
ebe060369f8d
jfs: Fix fortify moan in symlink
|
|
BUG: unable to handle kernel paging request in diFree
jfs
|
8 |
syz, C |
done |
|
13 |
1865d |
2136d
|
20/29 |
1728d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
UBSAN: shift-out-of-bounds in chkSuper
jfs
|
-1 |
syz, C |
unreliable |
|
28 |
1991d |
2057d
|
20/29 |
1942d |
3bef198f1b17
JFS: more checks for invalid superblock
|