• Boaz Harrosh's avatar
    ore: Fix out-of-bounds access in _ios_obj() · 9e62bb44
    Boaz Harrosh authored
    _ios_obj() is accessed by group_index not device_table index.
    
    The oc->comps array is only a group_full of devices at a time
    it is not like ore_comp_dev() which is indexed by a global
    device_table index.
    
    This did not BUG until now because exofs only uses a single
    COMP for all devices. But with other FSs like PanFS this is
    not true.
    
    This bug was only in the write_path, all other users were
    using it correctly
    
    [This is a bug since 3.2 Kernel]
    CC: Stable Tree <stable@kernel.org>
    Signed-off-by: default avatarBoaz Harrosh <bharrosh@panasas.com>
    9e62bb44
ore.c 28.9 KB