)]}'
{
  "commit": "14807ec78fb9daca4c8d0c0f8abdf4efe6d3fa64",
  "tree": "cb04d3a77753a65cca8d96b52c5d577ce93ff529",
  "parents": [
    "4b15e7c48feb5e78b6f5c9b478a580f762c45244"
  ],
  "author": {
    "name": "Sandeep Dhavale",
    "email": "dhavale@google.com",
    "time": "Wed May 27 19:05:28 2026 -0700"
  },
  "committer": {
    "name": "mdb:android-git",
    "email": "superproject-auto-update@invalid",
    "time": "Mon Sep 14 08:44:56 2026 -0700"
  },
  "message": "ANDROID: fuse-bpf: enforce stacking depth limits on backing files\n\nFUSE-BPF backing file passthrough allows VFS operations to be\nforwarded directly to a backing lower-filesystem file. The backing\nfile is resolved from a daemon-supplied `backing_fd` in FUSE_LOOKUP\nreplies.\n\nTo ensure architectural integrity in stacked filesystem environments\n(such as FUSE-BPF overlaid on other filesystems), we must enforce\nstrict nesting limits and loop prevention. Previously, the FUSE-BPF\nbacking path did not properly track filesystem stacking depth or\nvalidate backing target types, which could allow the creation of\nself-referencing or excessively deep nesting loops.\n\nEnforce standard VFS stacking limits and prevent recursive nesting\nloops.\n\nImplement this by:\n1. Rejecting any `backing_fd` (in `fuse_dev_do_write`) whose resolved\n   file resides on a FUSE filesystem (identified by `FUSE_SUPER_MAGIC`)\n   or whose backing superblock stack depth exceeds\n   `FILESYSTEM_MAX_STACK_DEPTH`.\n2. Propagating the backing superblock\u0027s stack depth (+1) to the FUSE-BPF\n   superblock\u0027s `s_stack_depth` in `fuse_fill_super_common` to enable\n   correct VFS stack depth tracking.\n3. Rejecting the `root_dir` mount option (in `fuse_parse_param`) if the\n   target directory resides on a FUSE filesystem or if its stack depth\n   exceeds `FILESYSTEM_MAX_STACK_DEPTH`.\n\nBug: 508703285\nSigned-off-by: Sandeep Dhavale \u003cdhavale@google.com\u003e\nChange-Id: I4b272548905047673cdc67b78d1638b08a60e979\n(cherry picked from commit a52575260f65a2ae33e8da933a8aa054f3c75d74)\nSigned-off-by: Lee Jones \u003cjoneslee@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "241747c371a37d45fd146fe641b12509f69bc5db",
      "old_mode": 57344,
      "old_path": "common",
      "new_id": "6a319cefd91df8e63d9f2d99920afa2802e831b2",
      "new_mode": 57344,
      "new_path": "common"
    }
  ]
}
