关键漏洞信息 漏洞类型: 一般保护故障 (General Protection Fault) 触发条件: 当树指针为NULL时， 方法会触发崩溃。 受影响函数: 错误日志: - OOPS: general protection fault, probably for non-canonical address 0xdffffc0000000008 - NULL-ptr-deref in range [0x0000000000000040-0x0000000000000047] - CPU: 2 PID: 9787 Comm: repro taints 6.16.0-rc3 #10 PREEMPT(full) 硬件和软件环境: - 硬件: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.1.3-debian-1.1.3-2 04/01/2014 - 内核版本: 6.16.0-rc3 调用栈跟踪: - hfs_ext_read_extent+0x190/0x9d0 - submit_bio_noacct_nocheck+0x2dd/0xce0 - __pfx_hfs_ext_read_extent+0x10/0x10 - hfs_get_block+0x55f/0x830 - block_read_full_folio+0x36d/0x850 - __pfx_hfs_get_block+0x10/0x10 - const_folio_flags+0x5b/0x100 - ? __pfx_hfs_read_folio+0x10/0x10 - filemap_read_folio+0xbe/0x290 - ? __pfx_filemap_read_folio+0x10/0x10 - do_read_cache_folio+0x263/0x5c0 - ? __pfx_hfs_read_folio+0x10/0x10 - read_cache_page+0x5b/0x160 - hfs_btree_open+0x491/0x1740 - hfs_mdb_get+0x15e2/0x1fb0 - ? __pfx_hfs_mdb_get+0x10/0x10 - find_held_lock+0x2b/0x80 - lockdep_init_map_type+0x5c/0x280 - lockdep_init_map_type+0x5c/0x280