+1 -1

fs/squashfs/export.c

reviewed

··· 147 147 * table[0] points to the first inode lookup table metadata block, 148 148 * this should be less than lookup_table_start 149 149 */ 150 150 - if (!IS_ERR(table) && table[0] >= lookup_table_start) { 150 150 + if (!IS_ERR(table) && le64_to_cpu(table[0]) >= lookup_table_start) { 151 151 kfree(table); 152 152 return ERR_PTR(-EINVAL); 153 153 }

+1 -1

fs/squashfs/fragment.c

reviewed

··· 90 90 * table[0] points to the first fragment table metadata block, this 91 91 * should be less than fragment_table_start 92 92 */ 93 93 - if (!IS_ERR(table) && table[0] >= fragment_table_start) { 93 93 + if (!IS_ERR(table) && le64_to_cpu(table[0]) >= fragment_table_start) { 94 94 kfree(table); 95 95 return ERR_PTR(-EINVAL); 96 96 }

+1 -1

fs/squashfs/id.c

reviewed

··· 93 93 * table[0] points to the first id lookup table metadata block, this 94 94 * should be less than id_table_start 95 95 */ 96 96 - if (!IS_ERR(table) && table[0] >= id_table_start) { 96 96 + if (!IS_ERR(table) && le64_to_cpu(table[0]) >= id_table_start) { 97 97 kfree(table); 98 98 return ERR_PTR(-EINVAL); 99 99 }

+3 -3

fs/squashfs/super.c

reviewed

··· 245 245 msblk->id_table = NULL; 246 246 goto failed_mount; 247 247 } 248 248 - next_table = msblk->id_table[0]; 248 248 + next_table = le64_to_cpu(msblk->id_table[0]); 249 249 250 250 /* Handle inode lookup table */ 251 251 lookup_table_start = le64_to_cpu(sblk->lookup_table_start); ··· 261 261 msblk->inode_lookup_table = NULL; 262 262 goto failed_mount; 263 263 } 264 264 - next_table = msblk->inode_lookup_table[0]; 264 264 + next_table = le64_to_cpu(msblk->inode_lookup_table[0]); 265 265 266 266 sb->s_export_op = &squashfs_export_ops; 267 267 ··· 286 286 msblk->fragment_index = NULL; 287 287 goto failed_mount; 288 288 } 289 289 - next_table = msblk->fragment_index[0]; 289 289 + next_table = le64_to_cpu(msblk->fragment_index[0]); 290 290 291 291 check_directory_table: 292 292 /* Sanity check directory_table */