mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-10-23 18:39:39 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
226291aa4641fa13cb5dec3bcb3379faa83009e2
linux/fs
T
History
dann frazier 226291aa46 ocfs2_connection_find() returns pointer to bad structure 
If ocfs2_live_connection_list is empty, ocfs2_connection_find() will return
a pointer to the LIST_HEAD, cast as a ocfs2_live_connection. This can cause
an oops when ocfs2_control_send_down() dereferences c->oc_conn:

Call Trace:
  [<ffffffffa00c2a3c>] ocfs2_control_message+0x28c/0x2b0 [ocfs2_stack_user]
  [<ffffffffa00c2a95>] ocfs2_control_write+0x35/0xb0 [ocfs2_stack_user]
  [<ffffffff81143a88>] vfs_write+0xb8/0x1a0
  [<ffffffff8155cc13>] ? do_page_fault+0x153/0x3b0
  [<ffffffff811442f1>] sys_write+0x51/0x80
  [<ffffffff810121b2>] system_call_fastpath+0x16/0x1b

Fix by explicitly returning NULL if no match is found.

Signed-off-by: dann frazier <dann.frazier@canonical.com>
Signed-off-by: Joel Becker <joel.becker@oracle.com>
2010-11-18 15:41:41 -08:00
..
9p
convert v9fs
2010-10-29 04:16:38 -04:00
adfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
affs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
afs
convert afs
2010-10-29 04:17:13 -04:00
autofs4
convert get_sb_nodev() users
2010-10-29 04:16:31 -04:00
befs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
bfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
btrfs
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable
2010-10-30 09:05:48 -07:00
cachefiles
…
ceph
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
cifs
cifs: fix a memleak in cifs_setattr_nounix()
2010-11-09 15:17:53 +00:00
coda
convert get_sb_nodev() users
2010-10-29 04:16:31 -04:00
configfs
convert get_sb_single() users
2010-10-29 04:16:28 -04:00
cramfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
debugfs
convert get_sb_single() users
2010-10-29 04:16:28 -04:00
devpts
convert get_sb_single() users
2010-10-29 04:16:28 -04:00
dlm
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/teigland/dlm
2010-10-22 17:33:16 -07:00
ecryptfs
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
efs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
exofs
convert get_sb_nodev() users
2010-10-29 04:16:31 -04:00
exportfs
exportfs: use dget_parent
2010-10-25 21:26:13 -04:00
ext2
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
ext3
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
ext4
Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4
2010-11-08 11:54:53 -08:00
fat
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
freevxfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
fscache
…
fuse
convert get_sb_nodev() users
2010-10-29 04:16:31 -04:00
gfs2
GFS2: Fix inode deallocation race
2010-11-15 12:44:42 +00:00
hfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
hfsplus
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
hostfs
convert get_sb_nodev() users
2010-10-29 04:16:31 -04:00
hpfs
Merge branches 'irq-core-for-linus' and 'core-locking-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2010-10-31 20:40:24 -04:00
hppfs
convert get_sb_nodev() users
2010-10-29 04:16:31 -04:00
hugetlbfs
hugetlbfs: lessen the impact of a deprecation warning
2010-11-12 07:55:32 -08:00
isofs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
jbd
Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs-2.6
2010-10-27 20:13:18 -07:00
jbd2
jbd2: Convert jbd2_slab_create_sem to mutex
2010-10-30 12:12:50 +02:00
jffs2
Merge git://git.infradead.org/mtd-2.6
2010-10-30 08:31:35 -07:00
jfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
lockd
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
logfs
fs: logfs: Fix up MTD=y build.
2010-11-01 16:34:56 -04:00
minix
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
ncpfs
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
nfs
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
nfs_common
…
nfsd
BKL: remove references to lock_kernel from comments
2010-11-17 08:59:32 -08:00
nilfs2
convert nilfs
2010-10-29 04:16:53 -04:00
nls
…
notify
make fanotify_read() restartable across signals
2010-10-30 14:07:35 -04:00
ntfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
ocfs2
ocfs2_connection_find() returns pointer to bad structure
2010-11-18 15:41:41 -08:00
omfs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
openpromfs
sparc: fix openpromfs compile
2010-11-08 14:29:39 -08:00
partitions
Merge branch 'for-linus' of git://git.kernel.dk/linux-2.6-block
2010-10-25 07:45:10 -07:00
proc
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
qnx4
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
quota
quota: Fix possible oops in __dquot_initialize()
2010-10-28 01:30:06 +02:00
ramfs
convert get_sb_nodev() users
2010-10-29 04:16:31 -04:00
reiserfs
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
romfs
convert get_sb_mtd() users to ->mount()
2010-10-29 04:16:26 -04:00
squashfs
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pkl/squashfs-linus
2010-10-29 08:48:58 -07:00
sysfs
convert sysfs
2010-10-29 04:17:08 -04:00
sysv
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
ubifs
convert ubifs
2010-10-29 04:16:36 -04:00
udf
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
ufs
new helper: mount_bdev()
2010-10-29 04:16:13 -04:00
xfs
xfs: remove incorrect assert in xfs_vm_writepage
2010-11-10 15:51:10 -06:00
aio.c
new helper: ihold()
2010-10-25 21:26:11 -04:00
anon_inodes.c
convert get_sb_pseudo() users
2010-10-29 04:16:33 -04:00
attr.c
…
bad_inode.c
…
binfmt_aout.c
…
binfmt_elf_fdpic.c
…
binfmt_elf.c
…
binfmt_em86.c
…
binfmt_flat.c
…
binfmt_misc.c
convert get_sb_single() users
2010-10-29 04:16:28 -04:00
binfmt_script.c
…
binfmt_som.c
…
bio-integrity.c
…
bio.c
bio: take care not overflow page count when mapping/copying user data
2010-11-10 14:40:43 +01:00
block_dev.c
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
buffer.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6
2010-10-26 17:58:44 -07:00
char_dev.c
Merge branch 'llseek' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/bkl
2010-10-22 10:52:56 -07:00
compat_binfmt_elf.c
…
compat_ioctl.c
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
compat.c
fs/compat.c: fix build on MIPS/s390
2010-10-30 08:19:35 -07:00
dcache.c
fs: use RCU read side protection in d_validate
2010-10-25 21:26:13 -04:00
dcookies.c
…
direct-io.c
fs/direct-io.c: fix truncation error in dio_complete() return
2010-10-26 16:52:13 -07:00
drop_caches.c
…
eventfd.c
…
eventpoll.c
epoll: make epoll_wait() use the hrtimer range feature
2010-10-27 18:03:18 -07:00
exec.c
exec: don't turn PF_KTHREAD off when a target command was not found
2010-10-27 18:03:13 -07:00
fcntl.c
fasync: Fix placement of FASYNC flag comment
2010-10-27 18:17:02 -07:00
fifo.c
…
file_table.c
fs: allow for more than 2^31 files
2010-10-26 16:52:15 -07:00
file.c
…
filesystems.c
…
fs_struct.c
…
fs-writeback.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable
2010-10-30 09:05:48 -07:00
generic_acl.c
…
inode.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6
2010-10-26 17:58:44 -07:00
internal.h
braino in internal.h
2010-10-29 05:49:13 -04:00
ioctl.c
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
ioprio.c
ioprio: rcu_read_lock/unlock protect find_task_by_vpid call (V2)
2010-11-10 14:40:53 +01:00
Kconfig
Merge 'staging-next' to Linus's tree
2010-10-28 09:44:56 -07:00
Kconfig.binfmt
coredump: default CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y
2010-10-27 18:03:12 -07:00
libfs.c
convert get_sb_pseudo() users
2010-10-29 04:16:33 -04:00
locks.c
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
Makefile
Merge 'staging-next' to Linus's tree
2010-10-28 09:44:56 -07:00
mbcache.c
…
mpage.c
…
namei.c
fix open/umount race
2010-10-29 04:14:56 -04:00
namespace.c
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
nfsctl.c
…
no-block.c
…
open.c
fix open/umount race
2010-10-29 04:14:56 -04:00
pipe.c
convert get_sb_pseudo() users
2010-10-29 04:16:33 -04:00
pnode.c
…
pnode.h
…
posix_acl.c
…
read_write.c
BKL: remove extraneous #include <smp_lock.h>
2010-11-17 08:59:32 -08:00
read_write.h
…
readdir.c
…
select.c
epoll: make epoll_wait() use the hrtimer range feature
2010-10-27 18:03:18 -07:00
seq_file.c
fs: take dcache_lock inside __d_path
2010-10-25 21:26:12 -04:00
signalfd.c
Merge branch 'hwpoison' of git://git.kernel.org/pub/scm/linux/kernel/git/ak/linux-mce-2.6
2010-10-26 10:13:10 -07:00
splice.c
…
stack.c
…
stat.c
…
statfs.c
…
super.c
switch get_sb_ns() users
2010-10-29 04:17:03 -04:00
sync.c
…
timerfd.c
…
utimes.c
…
xattr_acl.c
…
xattr.c
…