On Wed, Nov 27, 2019 at 02:12:58PM +0100, Jan Kara wrote: > Function ext4_empty_dir() doesn't correctly handle directories with > holes and crashes on bh->b_data dereference when bh is NULL.... Hi Jan, Thanks for the patch. However, it looks like we're still vulnerable to the first block of the directory being NULL? > @@ -2833,19 +2833,25 @@ bool ext4_empty_dir(struct inode *inode) > return true; > > de = (struct ext4_dir_entry_2 *) bh->b_data; ^^^^^^^^^^^ - Ted