diff options
| author | Daniel Xu <dxu@dxuuu.xyz> | 2020-10-08 18:09:10 -0700 |
|---|---|---|
| committer | David Sterba <dsterba@suse.com> | 2020-10-26 15:03:48 +0100 |
| commit | 85d07fbe09efd1c529ff3e025e2f0d2c6c96a1b7 (patch) | |
| tree | 8b61245838e4906ee46098b550e1930eee222b7b /fs/btrfs/dev-replace.c | |
| parent | cad69d139651423b9cb8917f514740ed3f08b10a (diff) | |
btrfs: tree-checker: validate number of chunk stripes and parity
If there's no parity and num_stripes < ncopies, a crafted image can
trigger a division by zero in calc_stripe_length().
The image was generated through fuzzing.
CC: stable@vger.kernel.org # 5.4+
Reviewed-by: Qu Wenruo <wqu@suse.com>
Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=209587
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz>
Signed-off-by: David Sterba <dsterba@suse.com>
Diffstat (limited to 'fs/btrfs/dev-replace.c')
0 files changed, 0 insertions, 0 deletions