Re: [PATCH] erofs: fix out-of-bound read for shifted uncompressed block

On 2020/1/7 10:25, Gao Xiang wrote:

rq->out[1] should be valid before accessing. Otherwise, in very rare cases, out-of-bound dirty onstack rq->out[1] can equal to *in and lead to unintended memmove behavior.

Fixes: 7fc45dbc938a ("staging: erofs: introduce generic decompression backend") Cc: stable@vger.kernel.org # v5.3+ Signed-off-by: Gao Xiang gaoxiang25@huawei.com

Reviewed-by: Chao Yu yuchao0@huawei.com

Thanks,