linux/fs/xfs/libxfs
Darrick J. Wong fe2f9135df xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
LOLLM noticed that the inode btree root formatting methods copy too many
bytes -- there's only one set of keys in node blocks, not two.  This
causes memory corruption of whatever's beyond the buffers.

Cc: stable@vger.kernel.org # v6.14
Fixes: f0415af60f ("xfs: wire up a new metafile type for the realtime refcount")
Signed-off-by: Darrick J. Wong <djwong@kernel.org>
Assisted-by: LOLLM # finding obvious bugs
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Carlos Maiolino <cem@kernel.org>
History 2026-09-17 11:27:41 +02:00
..
xfs_ag.c xfs: cleanup xfs_growfs_compute_deltas 2026-06-10 12:21:52 +02:00
xfs_ag.h xfs: fix typos and repeated words in comments 2026-09-15 10:47:28 +02:00
xfs_ag_resv.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_ag_resv.h xfs: get rid of xfs_ag_resv_rmapbt_alloc 2024-07-04 14:36:13 +05:30
xfs_alloc.c xfs: fix typos and repeated words in comments 2026-09-15 10:47:28 +02:00
xfs_alloc.h xfs: support logging EFIs for realtime extents 2024-11-05 13:38:42 -08:00
xfs_alloc_btree.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_alloc_btree.h xfs: standardize the btree maxrecs function parameters 2024-09-01 08:58:20 -07:00
xfs_attr.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_attr.h xfs: annotate struct xfs_attr_list_context with __counted_by_ptr 2026-03-18 09:54:39 +01:00
xfs_attr_leaf.c xfs: fix typos and repeated words in comments 2026-09-15 10:47:28 +02:00
xfs_attr_leaf.h xfs: factor out xfs_attr3_leaf_init 2026-03-23 10:47:28 +01:00
xfs_attr_remote.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_attr_remote.h xfs: create a helper to compute the blockcount of a max sized remote value 2024-05-02 07:48:36 -07:00
xfs_attr_sf.h xfs: pass the attr value to put_listent when possible 2024-04-23 07:47:00 -07:00
xfs_bit.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_bit.h xfs: Use the correct style for SPDX License Identifier 2020-05-13 15:32:45 -07:00
xfs_bmap.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_bmap.h xfs: allow block allocator to take an alignment hint 2025-05-07 14:25:31 -07:00
xfs_bmap_btree.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_bmap_btree.h xfs: fix pointer arithmetic error on 32-bit systems 2026-06-10 12:21:52 +02:00
xfs_btree.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_btree.h xfs: refactor xfs_btree_diff_two_ptrs() to take advantage of cmp_int() 2025-07-24 17:30:13 +02:00
xfs_btree_mem.c xfs: preserve owner on in-memory btree creation 2026-09-07 07:50:35 +02:00
xfs_btree_mem.h xfs: launder in-memory btree buffers before transaction commit 2024-02-22 12:43:36 -08:00
xfs_btree_staging.c xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails 2026-09-07 07:50:35 +02:00
xfs_btree_staging.h xfs: don't override bc_ops for staging btrees 2024-02-22 12:37:35 -08:00
xfs_cksum.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
xfs_da_btree.c xfs: fix under-reservation of blocks when repairing sf directories 2026-09-11 08:37:30 +02:00
xfs_da_btree.h xfs: fix under-reservation of blocks when repairing sf directories 2026-09-11 08:37:30 +02:00
xfs_da_format.h xfs: refactor attr3 leaf table size computation 2026-01-23 09:27:31 -08:00
xfs_defer.c xfs: report the error that made deferred work shut down the fs 2026-09-07 07:50:34 +02:00
xfs_defer.h xfs: add a realtime flag to the refcount update log redo items 2024-12-23 13:06:11 -08:00
xfs_dir2.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_dir2.h xfs: mark xfs_dir_isempty static 2025-01-13 14:55:06 +01:00
xfs_dir2_block.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_dir2_data.c xfs: zero directory data block padding on write verification 2026-04-27 10:36:36 +02:00
xfs_dir2_leaf.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_dir2_node.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_dir2_priv.h xfs: don't walk off the end of a directory data block 2024-07-01 09:32:29 +05:30
xfs_dir2_sf.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_dquot_buf.c xfs: remove spurious XBF_DONE clearing on readahead validation failure 2026-08-10 08:34:43 +02:00
xfs_errortag.h xfs: fix typos and repeated words in comments 2026-09-15 10:47:28 +02:00
xfs_exchmaps.c xfs: fix typos and repeated words in comments 2026-09-15 10:47:28 +02:00
xfs_exchmaps.h xfs: use atomic extent swapping to fix user file fork data 2024-04-15 14:58:53 -07:00
xfs_format.h xfs: fix typos and repeated words in comments 2026-09-15 10:47:28 +02:00
xfs_fs.h xfs: add write pointer to xfs_rtgroup_geometry 2026-03-04 09:58:24 +01:00
xfs_group.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_group.h xfs: add a xfs_groups_to_rfsbs helper 2025-11-11 11:38:05 +01:00
xfs_health.h xfs: convey metadata health events to the health monitor 2026-01-20 18:06:47 -08:00
xfs_ialloc.c xfs: hide b_flags manipulation from code outside of xfs_buf.c 2026-08-10 08:34:43 +02:00
xfs_ialloc.h xfs: pass the icreate args object to xfs_dialloc 2024-09-01 08:58:19 -07:00
xfs_ialloc_btree.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_ialloc_btree.h xfs: standardize the btree maxrecs function parameters 2024-09-01 08:58:20 -07:00
xfs_iext_tree.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_inode_buf.c xfs: fix typos and repeated words in comments 2026-09-15 10:47:28 +02:00
xfs_inode_buf.h xfs: mark struct xfs_imap as __packed 2026-06-09 09:14:42 +02:00
xfs_inode_fork.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_inode_fork.h xfs: make xfs_iroot_realloc a bmap btree function 2024-12-23 13:06:02 -08:00
xfs_inode_util.c xfs: new code for Linux 7.2 2026-06-16 11:50:40 +05:30
xfs_inode_util.h xfs: hoist inode free function to libxfs 2024-07-02 11:36:59 -07:00
xfs_log_format.h xfs: move XFS_LSN_CMP to xfs_log_format.h 2026-06-12 09:54:20 +02:00
xfs_log_recover.h xfs: remove the xfs_trans_header_t typedef 2025-09-16 12:25:05 +02:00
xfs_log_rlimit.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_metadir.c xfs: mark internal metadir file creation helpers static 2026-07-22 15:12:11 +02:00
xfs_metadir.h xfs: mark internal metadir file creation helpers static 2026-07-22 15:12:11 +02:00
xfs_metafile.c xfs: don't let hidden_space go negative in xfs_metafile_resv_init 2026-09-17 11:27:41 +02:00
xfs_metafile.h xfs: make metabtree reservations global 2025-03-03 08:16:43 -07:00
xfs_ondisk.h xfs: add static size checks for ioctl UABI 2026-02-25 13:58:50 +01:00
xfs_parent.c xfs: initialise args->total for parent pointer updates 2026-09-07 07:50:34 +02:00
xfs_parent.h xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_quota_defs.h xfs: use a lockref for the xfs_dquot reference count 2025-11-11 11:45:57 +01:00
xfs_refcount.c xfs: remove the meaningless XFS_ALLOC_FLAG_FREEING 2026-04-27 10:36:36 +02:00
xfs_refcount.h xfs: recover CoW leftovers in the realtime volume 2024-12-23 13:06:13 -08:00
xfs_refcount_btree.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_refcount_btree.h xfs: standardize the btree maxrecs function parameters 2024-09-01 08:58:20 -07:00
xfs_rmap.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_rmap.h xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_rmap_btree.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_rmap_btree.h xfs: standardize the btree maxrecs function parameters 2024-09-01 08:58:20 -07:00
xfs_rtbitmap.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_rtbitmap.h xfs: online repair of realtime bitmaps for a realtime group 2024-12-23 13:06:08 -08:00
xfs_rtgroup.c xfs: create rtgroup metadir inodes using xfs_metadir_create_file 2026-07-22 15:12:10 +02:00
xfs_rtgroup.h xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf 2026-08-21 09:09:53 +02:00
xfs_rtrefcount_btree.c xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots 2026-09-17 11:27:41 +02:00
xfs_rtrefcount_btree.h xfs: create routine to allocate and initialize a realtime refcount btree inode 2024-12-23 13:06:12 -08:00
xfs_rtrmap_btree.c xfs: fix xfs_rtrmapbt_mem_cursor for non-rmap filesystems 2026-09-07 07:50:35 +02:00
xfs_rtrmap_btree.h xfs: add a xfs_rtrmap_highest_rgbno helper 2025-03-03 08:16:45 -07:00
xfs_sb.c xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf 2026-08-21 09:09:53 +02:00
xfs_sb.h xfs: make xfs_rtblock_t a segmented address like xfs_fsblock_t 2024-11-05 13:38:44 -08:00
xfs_shared.h xfs: introduce realtime refcount btree ondisk definitions 2024-12-23 13:06:10 -08:00
xfs_symlink_remote.c xfs: remove the i_ino field in struct xfs_inode 2026-06-09 09:14:41 +02:00
xfs_symlink_remote.h xfs: pass the owner to xfs_symlink_write_target 2024-04-15 14:58:57 -07:00
xfs_trans_inode.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_trans_resv.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_trans_resv.h xfs: allow sysadmins to specify a maximum atomic write limit at mount time 2025-05-07 14:25:33 -07:00
xfs_trans_space.c xfs: correct the parent pointer space reservation comment 2026-09-07 07:50:34 +02:00
xfs_trans_space.h xfs: realtime rmap btree transaction reservations 2024-12-23 13:06:04 -08:00
xfs_types.c xfs: directly include xfs_platform.h 2026-01-21 12:57:16 +01:00
xfs_types.h xfs: add support for zoned space reservations 2025-03-03 08:17:07 -07:00
xfs_zones.c xfs: split and refactor zone validation 2026-01-21 12:57:17 +01:00
xfs_zones.h xfs: split and refactor zone validation 2026-01-21 12:57:17 +01:00