)]}'
{
  "commit": "2890fc8995cd68013377c0adcc1f6e985ee6e11e",
  "tree": "985660e3a6c0ca29fad730d22e3d8bf3fe035372",
  "parents": [
    "f3e4efb0293202dc1f1ecc4662e5a5535d8547b8"
  ],
  "author": {
    "name": "Matthew Mirvish",
    "email": "matthew@mm12.xyz",
    "time": "Thu May 09 09:11:17 2024 +0800"
  },
  "committer": {
    "name": "Arnav Kansal",
    "email": "rnv@google.com",
    "time": "Mon Jul 15 20:48:23 2024 +0000"
  },
  "message": "bcache: fix variable length array abuse in btree_iter\n\n[ Upstream commit 3a861560ccb35f2a4f0a4b8207fa7c2a35fc7f31 ]\n\nbtree_iter is used in two ways: either allocated on the stack with a\nfixed size MAX_BSETS, or from a mempool with a dynamic size based on the\nspecific cache set. Previously, the struct had a fixed-length array of\nsize MAX_BSETS which was indexed out-of-bounds for the dynamically-sized\niterators, which causes UBSAN to complain.\n\nThis patch uses the same approach as in bcachefs\u0027s sort_iter and splits\nthe iterator into a btree_iter with a flexible array member and a\nbtree_iter_stack which embeds a btree_iter as well as a fixed-length\ndata array.\n\nBUG\u003db/352002606\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixes CVE-2024-39482 in the Linux kernel\n\ncos-patch: security-moderate\nCc: stable@vger.kernel.org\nCloses: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2039368\nChange-Id: I417e37b774e79b2f29c15c9eade185d20d3ed50a\nSigned-off-by: Matthew Mirvish \u003cmatthew@mm12.xyz\u003e\nSigned-off-by: Coly Li \u003ccolyli@suse.de\u003e\nLink: https://lore.kernel.org/r/20240509011117.2697-3-colyli@suse.de\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Arnav Kansal \u003crnv@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/75841\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "94d38e8a59b323aa576cc1b0f6ed6ef95ebef49d",
      "old_mode": 33188,
      "old_path": "drivers/md/bcache/bset.c",
      "new_id": "cb544207427b11aaa1fc8119cf0e15464c386bfd",
      "new_mode": 33188,
      "new_path": "drivers/md/bcache/bset.c"
    },
    {
      "type": "modify",
      "old_id": "a50dcfda656f5f9426eb66ac6620348aa23e2a0d",
      "old_mode": 33188,
      "old_path": "drivers/md/bcache/bset.h",
      "new_id": "2ed6dbd35d6e5ecc27d38359adfb6e5d0400aa4d",
      "new_mode": 33188,
      "new_path": "drivers/md/bcache/bset.h"
    },
    {
      "type": "modify",
      "old_id": "e22dfcf1ed6d83b746bb7ae2776a403b07b50c1f",
      "old_mode": 33188,
      "old_path": "drivers/md/bcache/btree.c",
      "new_id": "066b4aafd49e5aedf0d22932cc10c83f8f22814b",
      "new_mode": 33188,
      "new_path": "drivers/md/bcache/btree.c"
    },
    {
      "type": "modify",
      "old_id": "8ec48d8a5821c28bd649038ad5b69b77859a81d7",
      "old_mode": 33188,
      "old_path": "drivers/md/bcache/super.c",
      "new_id": "48624e6bf0d79eb93a117d8a8dbba53131c68197",
      "new_mode": 33188,
      "new_path": "drivers/md/bcache/super.c"
    },
    {
      "type": "modify",
      "old_id": "fa146012003df0d6e2f40081a6d3c3b3c89e046c",
      "old_mode": 33188,
      "old_path": "drivers/md/bcache/sysfs.c",
      "new_id": "7024eaed8d486a3abd2c3a0c883ffa4d740b1a38",
      "new_mode": 33188,
      "new_path": "drivers/md/bcache/sysfs.c"
    },
    {
      "type": "modify",
      "old_id": "1e96679afcf4a899c12f3069d0bd1dfc4cf89a8e",
      "old_mode": 33188,
      "old_path": "drivers/md/bcache/writeback.c",
      "new_id": "142eaf0ff9aea94859f68e5c00ba6bbb372b45b9",
      "new_mode": 33188,
      "new_path": "drivers/md/bcache/writeback.c"
    }
  ]
}