diff options
| author | Namjae Jeon <linkinjeon@kernel.org> | 2026-10-13 09:15:00 +0900 |
|---|---|---|
| committer | Namjae Jeon <linkinjeon@kernel.org> | 2026-10-20 18:46:01 +0900 |
| commit | 9365c4a1357e2a5d7f1aff140429028ad292161f (patch) | |
| tree | c5a181666d4c68effff8a30662b1fde6fbc1b03f /scripts/Makefile.thinlto | |
| parent | 16702fb84fe27f5a5dfc398d6254b9d79fe3e144 (diff) | |
| download | linux-9365c4a1357e2a5d7f1aff140429028ad292161f.tar.gz linux-9365c4a1357e2a5d7f1aff140429028ad292161f.zip | |
ntfs: fix NULL dereference on index allocation open failure
ntfs_index_lookup() returns -ENOENT when ntfs_ia_open() fails to open the
index allocation. This error path leaves icx->ib unset, unlike a missing
key in an otherwise valid index, which returns an insertion context.
ntfs_ie_add() treats -ENOENT as a valid insertion position and dereferences
icx->ib when the lookup is not in the index root. A corrupt $I30 bitmap
attribute can therefore cause a NULL pointer dereference when adding a
directory entry.
Return -EIO for index allocation open failures so insertion aborts through
the existing error path. Keep -ENOENT for genuinely missing keys and
document that other errors leave no valid index entry.
Fixes: 0a8ac0c1fa0b ("ntfs: update directory operations")
Reported-by: 1sh1ro <yangguikun19@qq.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions
