Re: [PATCH v2] ext4: fix use-after-free race with debug_want_extra_isize

From: Theodore Ts'o
Date: Thu Apr 25 2019 - 11:58:00 EST


On Thu, Apr 18, 2019 at 11:59:37AM -0400, Barret Rhoden wrote:
> When remounting with debug_want_extra_isize, we were not performing the
> same checks that we do during a normal mount. That allowed us to set a
> value for s_want_extra_isize that reached outside the s_inode_size.
>
> Reported-by: syzbot+f584efa0ac7213c226b7@xxxxxxxxxxxxxxxxxxxxxxxxx
> Reviewed-by: Jan Kara <jack@xxxxxxx>
> Signed-off-by: Barret Rhoden <brho@xxxxxxxxxx>
> Cc: stable@xxxxxxxxxxxxxxx # 4.14.111

Applied, thanks.

- Ted