Please sign in to comment.
ore: Fix out-of-bounds access in _ios_obj()
commit 9e62bb4 upstream. _ios_obj() is accessed by group_index not device_table index. The oc->comps array is only a group_full of devices at a time it is not like ore_comp_dev() which is indexed by a global device_table index. This did not BUG until now because exofs only uses a single COMP for all devices. But with other FSs like PanFS this is not true. This bug was only in the write_path, all other users were using it correctly [This is a bug since 3.2 Kernel] Signed-off-by: Boaz Harrosh <email@example.com> Signed-off-by: Ben Hutchings <firstname.lastname@example.org>
- Loading branch information...