jfs: Fix sanity check in dbMount

kleikamp · gregkh · commit f475d8a0cca7 · 2024-11-01T01:58:28.000+01:00
[ Upstream commit 67373ca ] MAXAG is a legitimate value for bmp->db_numag Fixes: e63866a ("jfs: fix out-of-bounds in dbNextAG() and diAlloc()") Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org>
diff --git a/fs/jfs/jfs_dmap.c b/fs/jfs/jfs_dmap.c
@@ -187,7 +187,7 @@ int dbMount(struct inode *ipbmap)
 	}
 
 	bmp->db_numag = le32_to_cpu(dbmp_le->dn_numag);
-	if (!bmp->db_numag || bmp->db_numag >= MAXAG) {
+	if (!bmp->db_numag || bmp->db_numag > MAXAG) {
 		err = -EINVAL;
 		goto err_release_metapage;
 	}

Original file line number	Diff line number	Diff line change
`@@ -187,7 +187,7 @@ int dbMount(struct inode *ipbmap)`
`187`	`187`	`}`
`188`	`188`
`189`	`189`	`bmp->db_numag = le32_to_cpu(dbmp_le->dn_numag);`
`190`		`- if (!bmp->db_numag \|\| bmp->db_numag >= MAXAG) {`
	`190`	`+ if (!bmp->db_numag \|\| bmp->db_numag > MAXAG) {`
`191`	`191`	`err = -EINVAL;`
`192`	`192`	`goto err_release_metapage;`
`193`	`193`	`}`