Lidong Chen 66175696f3 fs/jfs: Fix OOB read in jfs_getent()
The JFS fuzzing revealed an OOB read in grub_jfs_getent(). The crash
was caused by an invalid leaf nodes count, diro->dirpage->header.count,
which was larger than the maximum number of leaf nodes allowed in an
inode. This fix is to ensure that the leaf nodes count is validated in
grub_jfs_opendir() before calling grub_jfs_getent().

On the occasion replace existing raw numbers with newly defined constant.

Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Reviewed-by: Alec Brown <alec.r.brown@oracle.com>
2025-01-23 16:22:46 +01:00
..
2011-10-30 16:10:18 +01:00
2022-03-14 15:45:30 +01:00
2011-04-11 18:13:00 +02:00
2022-07-27 19:20:53 +02:00
2022-03-14 15:45:30 +01:00
2025-01-23 16:22:46 +01:00
2025-01-23 16:22:46 +01:00
2011-04-11 08:16:13 +02:00
2022-03-14 15:45:30 +01:00
2023-10-03 15:38:48 +02:00
2019-04-09 10:03:29 +10:00
2022-03-14 15:45:30 +01:00
2022-03-14 15:45:30 +01:00
2023-06-13 14:48:38 +02:00
2010-05-06 11:34:04 +05:30
2012-12-08 20:56:58 +01:00
2024-12-02 17:32:51 +01:00