Re: [LTP] cve: reproducer for cve-2026-64600

[email protected]
Newsgroups it.linux.lists.ltp
Message-ID <[email protected]>
Hi Andrea,

On August 1, 2026, Andrea Cervesato wrote:
> cve: reproducer for cve-2026-64600

> 	struct stat sb;
>
> 	SAFE_STAT(".", &sb);
> 	blksize = sb.st_blksize;

Could the I/O size and alignment be derived from MNTPOINT or TARGET instead?
The framework mounts XFS at MNTPOINT but leaves "." on the surrounding
temporary filesystem, whose block size can differ from that of XFS.

For example, with a 1 KiB host filesystem and a 4 KiB XFS filesystem, these
writes are not XFS-block-aligned. xfs_file_dio_write_unaligned() returns
-ENOTBLK for the reflinked file, and xfs_file_write_iter() silently retries
the operation as buffered I/O. SAFE_PWRITE() still succeeds, but the test can
then report TPASS without exercising xfs_direct_write_iomap_begin() or the
target race.

Verdict - Needs revision

---
Note:

The agent can sometimes produce false positives although often its
findings are genuine. If you find issues with the review, please
comment this email or ignore the suggestions.

Regards,
LTP AI Reviewer

-- 
Mailing list info: https://lists.linux.it/listinfo/ltp
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.