u-boot.git/fs, branch v2026.01

fs: fat: Perform sanity checks on getsize in get_fatent()

2025-12-12T14:52:57+00:00

We do not perform a check on the value of getsize in get_fatent to
ensure that it will fit within the allocated buffer. For safety sake,
add a check now and if the value exceeds FATBUFBLOCKS use that value
instead. While not currently actively exploitable, it was in the past so
adding this check is worthwhile.

This addresses CVE-2025-24857 and was originally reported by Harvey
Phillips of Amazon Element55.

Signed-off-by: Tom Rini

fs: semihosting: Use correct variable for error check

2025-10-18T00:07:20+00:00

After calling a function that can return an error, the test to detect
that error should use the return value not a different variable. Fix it.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody 
Reviewed-by: Sean Anderson 
Fixes: f676b45151c3 ("fs: Add semihosting filesystem")

fs: jffs2: Remove always true test

2025-10-10T20:27:59+00:00

Testing an unsigned variable to be >= 0 will always be true so remove
this redundant test.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody 
Reviewed-by: Quentin Schulz

fs/squashfs: Ensure memory is freed by using unwind goto

2025-10-10T20:27:49+00:00

Returning immediately from sqfs_read_nest is not consistent with other
error checks in this function and can lead to memory leaks. Instead use
the unwind goto used elsewhere to ensure that the memory is freed.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody 
Acked-by: Quentin Schulz 
Reviewed-by: Joao Marcos Costa

fs: Rework filesystem guards for xPL phases

2025-10-10T20:25:35+00:00

When adding filesystems to the table in fs/fs.c we need to use
CONFIG_IS_ENABLED(FS_xxx) so that we only include references to a given
filesystem when CONFIG_FS_xxx or CONFIG_SPL_FS_xxx or similar are
enabled. Update the filesystems which weren't doing this to follow that
pattern.

Signed-off-by: Tom Rini

fs: ubifs: Fix and rework error handling in ubifs_finddir

2025-10-08T09:36:05+00:00

Add a null check for 'file' before dereferencing it and also rework the
error handling to be a bit more sane.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody

fs: ubifs: Need to check return for being an error pointer

2025-10-08T09:36:00+00:00

The return value from alloc_super can be an error pointer so the error
check needs to detect this as well as checking the pointer for being
NULL.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody

fs: ubifs: Ensure buf is freed before return

2025-10-08T09:35:47+00:00

Returning directly after buf has been allocated will result in a memory
leak. Instead set the error code and goto the common unwind code to
ensure that buf will be freed before returning.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody

fs: ext4fs: add CONFIG_EXT4_MAX_JOURNAL_ENTRIES to Kconfig

2025-09-10T16:39:09+00:00

Add maximum ext4 journal entries to Kconfig. It is necessary since the
number of journal entries is proportional to disk capacity. For example,
an ext4 4TB HDD partition could require approximately 500 entries.

Signed-off-by: Tony Dinh 
Reviewed-by: Tom Rini

fs: ext4fs: Add initialization failure recovery path in ext4fs_write

2025-09-10T16:38:56+00:00

Don't invoke ext4fs_deinit() in ext4fs_write() if the failure occurs
during initialization. It would result in a crash since ext4fs_init()
has already done that.

Signed-off-by: Tony Dinh 
Reviewed-by: Tom Rini