tree 72cac3cf807debecfaffe262c6d6994667a88edd
parent 693f791504706aab4e70f0525ea4d4ae671cee9f
author Stefan Brüns <stefan.bruens@rwth-aachen.de> 1473129410 +0200
committer Tom Rini <trini@konsulko.com> 1474635760 -0400

ext4: Avoid out-of-bounds access of block bitmap

If the blocksize is 1024, count is initialized with 1. Incrementing count
by 8 will never match (count == fs->blksz * 8), and ptr may be
incremented beyond the buffer end if the bitmap is filled. Add the
startblock offset after the loop.

Remove the second loop, as only the first iteration will be done.

Signed-off-by: Stefan Brüns <stefan.bruens@rwth-aachen.de>
Reviewed-by: Lukasz Majewski <l.majewski@samsung.com>