Re: [PATCH v2 0/2] ocfs2: validate xattr metadata bounds

Cen Zhang <[email protected]> Sun, 14 Jun 2026 09:32:48 +0800
Newsgroups dev.linux.lists.ocfs2-devel
Message-ID <CAB7XQsH2TcdhX93+HMkaxCWkLPeN_OQs=CF16M=_bDLqUgDqsg@mail.gmail.com>
Hi all,

Just a gentle ping on this series.

I would appreciate any feedback or guidance on whether further changes
are needed.

Thanks for your time and review.

Best regards,
Zhang Cen

Zhang Cen <[email protected]> 于2026年5月26日周二 11:40写道:
>
> Hi,
>
> This small series rejects corrupted OCFS2 xattr metadata before the
> getxattr and listxattr paths walk filesystem-controlled inline, external
> block, or indexed bucket storage.
>
> Patch 1 validates the inline xattr header placement and entry count
> before ocfs2_xattr_ibody_get() parses it. Patch 2 builds on that helper
> and validates listxattr entry counts and name ranges against the storage
> that backs each walk.
>
> Both issues were reproduced with crafted OCFS2 images under KASAN.
>
> v2:
> - Resend as a proper two-patch series. The previous send was malformed
>   by the transport and appeared as a single combined email.
>
> Zhang Cen (2):
>   ocfs2: validate inline xattr metadata in ocfs2_xattr_ibody_get
>   ocfs2: validate listxattr entry bounds
>
>  fs/ocfs2/xattr.c | 122 +++++++++++++++++++++++++++++++++++++++--------
>  1 file changed, 101 insertions(+), 21 deletions(-)
>
> --
> 2.43.0