From: Dan Robertson <dan@dlrobertson.com>
Date: Sun, 30 Aug 2020 21:45:23 +0000 (+0000)
Subject: f2fs: check position in move range ioctl
X-Git-Tag: rel_imx_5.10.35_2.0.0-somdevices.0~977^2~34
X-Git-Url: https://git.somdevices.com/?a=commitdiff_plain;h=aad1383cbf08c87f29f5dba1622e122717fbc32a;p=linux.git

f2fs: check position in move range ioctl

When the move range ioctl is used, check the input and output position and
ensure that it is a non-negative value. Without this check
f2fs_get_dnode_of_data may hit a memmory bug.

Signed-off-by: Dan Robertson <dan@dlrobertson.com>
Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
---

diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c
index a7e15bec7a8e..0a958eef3d1f 100644
--- a/fs/f2fs/file.c
+++ b/fs/f2fs/file.c
@@ -2768,6 +2768,9 @@ static int f2fs_move_file_range(struct file *file_in, loff_t pos_in,
 	if (IS_ENCRYPTED(src) || IS_ENCRYPTED(dst))
 		return -EOPNOTSUPP;
 
+	if (pos_out < 0 || pos_in < 0)
+		return -EINVAL;
+
 	if (src == dst) {
 		if (pos_in == pos_out)
 			return 0;