iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs/btrfs
History
Zhang Xiaoxu c914c56ac0 btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() 
commit 9b2f20344d450137d015b380ff0c2e2a6a170135 upstream.

The btrfs_alloc_dummy_root() uses ERR_PTR as the error return value
rather than NULL, if error happened, there will be a NULL pointer
dereference:

  BUG: KASAN: null-ptr-deref in btrfs_free_dummy_root+0x21/0x50 [btrfs]
  Read of size 8 at addr 000000000000002c by task insmod/258926

  CPU: 2 PID: 258926 Comm: insmod Tainted: G        W          6.1.0-rc2+ #5
  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 04/01/2014
  Call Trace:
   <TASK>
   dump_stack_lvl+0x34/0x44
   kasan_report+0xb7/0x140
   kasan_check_range+0x145/0x1a0
   btrfs_free_dummy_root+0x21/0x50 [btrfs]
   btrfs_test_free_space_cache+0x1a8c/0x1add [btrfs]
   btrfs_run_sanity_tests+0x65/0x80 [btrfs]
   init_btrfs_fs+0xec/0x154 [btrfs]
   do_one_initcall+0x87/0x2a0
   do_init_module+0xdf/0x320
   load_module+0x3006/0x3390
   __do_sys_finit_module+0x113/0x1b0
   do_syscall_64+0x35/0x80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0

Fixes: aaedb55bc08f ("Btrfs: add tests for btrfs_get_extent")
CC: stable@vger.kernel.org # 4.9+
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-11-25 17:42:09 +01:00
..
tests
btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
2022-11-25 17:42:09 +01:00
acl.c
btrfs: cleanup btrfs_setxattr_trans and drop transaction parameter
2019-04-29 19:02:44 +02:00
async-thread.c
btrfs: fix memory ordering between normal and ordered work functions
2021-11-26 10:47:21 +01:00
async-thread.h
Btrfs: fix crash during unmount due to race with delayed inode workers
2020-04-17 10:50:15 +02:00
backref.c
btrfs: fix inode list leak during backref walking at find_parent_nodes()
2022-11-10 17:57:52 +01:00
backref.h
btrfs: fiemap: preallocate ulists for btrfs_check_shared
2019-07-01 13:34:53 +02:00
block-group.c
btrfs: reset block group chunk force if we have to wait
2022-08-25 11:18:11 +02:00
block-group.h
btrfs: scrub: Don't check free space before marking a block group RO
2021-03-20 10:39:46 +01:00
block-rsv.c
btrfs: force chunk allocation if our global rsv is larger than metadata
2020-06-22 09:31:13 +02:00
block-rsv.h
btrfs: migrate the global_block_rsv helpers to block-rsv.c
2019-07-02 12:30:55 +02:00
btrfs_inode.h
btrfs: fix race between marking inode needs to be logged and log syncing
2021-09-03 10:08:15 +02:00
check-integrity.c
btrfs: fix possible NULL-pointer dereference in integrity checks
2020-02-24 08:36:53 +01:00
check-integrity.h
…
compression.c
btrfs: mark compressed range uptodate only if all bio succeed
2021-08-04 12:27:37 +02:00
compression.h
btrfs: compression: replace set_level callbacks by a common helper
2019-09-09 14:59:11 +02:00
ctree.c
btrfs: check the root node for uptodate before returning it
2022-01-27 09:19:50 +01:00
ctree.h
btrfs: unify lookup return value when dir entry is missing
2022-09-05 10:27:46 +02:00
delalloc-space.c
btrfs: make btrfs_qgroup_reserve_data take btrfs_inode
2021-08-15 13:08:04 +02:00
delalloc-space.h
btrfs: migrate the delalloc space stuff to it's own home
2019-07-04 17:26:17 +02:00
delayed-inode.c
btrfs: don't flush from btrfs_delayed_inode_reserve_metadata
2021-08-15 13:08:06 +02:00
delayed-inode.h
…
delayed-ref.c
Btrfs: fix race between adding and putting tree mod seq elements and nodes
2020-02-11 04:35:34 -08:00
delayed-ref.h
btrfs: migrate the delayed refs rsv code
2019-07-04 17:26:17 +02:00
dev-replace.c
btrfs: add info when mount fails due to stale replace target
2022-09-05 10:27:43 +02:00
dev-replace.h
btrfs: get fs_info from trans in btrfs_run_dev_replace
2019-04-29 19:02:43 +02:00
dir-item.c
btrfs: unify lookup return value when dir entry is missing
2022-09-05 10:27:46 +02:00
disk-io.c
btrfs: reject log replay if there is unsupported RO compat flag
2022-08-25 11:18:16 +02:00
disk-io.h
btrfs: Make reada_tree_block_flagged private
2019-09-09 14:59:11 +02:00
export.c
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 17:57:55 +01:00
export.h
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 17:57:55 +01:00
extent_io.c
btrfs: clear extent buffer uptodate when we fail to write it
2021-12-14 14:49:01 +01:00
extent_io.h
btrfs: fix qgroup reserve overflow the qgroup limit
2022-04-15 14:18:39 +02:00
extent_map.c
Btrfs: fix race between using extent maps and merging them
2020-02-19 19:53:00 +01:00
extent_map.h
…
extent-tree.c
btrfs: unlock newly allocated extent buffer after error
2021-10-20 11:40:13 +02:00
file-item.c
btrfs: fix error handling in btrfs_del_csums
2021-06-10 13:37:13 +02:00
file.c
btrfs: fix race between marking inode needs to be logged and log syncing
2021-09-03 10:08:15 +02:00
free-space-cache.c
btrfs: delete duplicated words + other fixes in comments
2021-08-08 09:04:07 +02:00
free-space-cache.h
btrfs: move struct io_ctl to free-space-cache.h
2019-09-09 14:59:15 +02:00
free-space-tree.c
btrfs: fix possible free space tree corruption with online conversion
2021-02-03 23:25:57 +01:00
free-space-tree.h
btrfs: move basic block_group definitions to their own header
2019-09-09 14:59:03 +02:00
inode-item.c
btrfs: Make btrfs_find_name_in_ext_backref return struct btrfs_inode_extref
2019-09-09 14:59:16 +02:00
inode-map.c
btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents()
2019-10-15 18:50:07 +02:00
inode-map.h
…
inode.c
btrfs: do not pin logs too early during renames
2022-09-05 10:27:46 +02:00
ioctl.c
fsnotify: invalidate dcache before IN_DELETE event
2022-02-01 17:24:39 +01:00
Kconfig
btrfs: disable build on platforms having page size 256K
2021-07-14 16:53:14 +02:00
locking.c
btrfs: move cond_wake_up functions out of ctree
2019-09-09 14:59:15 +02:00
locking.h
btrfs: Remove unused locking functions
2019-09-09 14:58:59 +02:00
lzo.c
btrfs: compression: replace set_level callbacks by a common helper
2019-09-09 14:59:11 +02:00
Makefile
btrfs: migrate the block group lookup code
2019-09-09 14:59:04 +02:00
misc.h
btrfs: move math functions to misc.h
2019-09-09 14:59:15 +02:00
ordered-data.c
Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents
2020-02-28 17:22:24 +01:00
ordered-data.h
btrfs: don't assume ordered sums to be 4 bytes
2019-07-01 13:35:00 +02:00
orphan.c
…
print-tree.c
btrfs: require only sector size alignment for parent eb bytenr
2020-09-17 13:47:51 +02:00
print-tree.h
…
props.c
btrfs: rename the btrfs_calc_*_metadata_size helpers
2019-09-09 14:59:13 +02:00
props.h
btrfs: delete unused function btrfs_set_prop_trans
2019-04-29 19:02:54 +02:00
qgroup.c
btrfs: fix race between quota enable and quota rescan ioctl
2022-10-26 13:22:16 +02:00
qgroup.h
btrfs: export and rename qgroup_reserve_meta
2021-08-15 13:08:06 +02:00
raid56.c
btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
2022-08-25 11:18:40 +02:00
raid56.h
btrfs: constify map parameter for nr_parity_stripes and nr_data_stripes
2019-07-01 13:34:58 +02:00
rcu-string.h
…
reada.c
btrfs: fix readahead hang and use-after-free after removing a device
2020-11-05 11:43:27 +01:00
ref-verify.c
btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
2020-11-18 19:20:28 +01:00
ref-verify.h
btrfs: ref-verify: Use btrfs_ref to refactor btrfs_ref_tree_mod()
2019-04-29 19:02:49 +02:00
relocation.c
btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
2021-05-11 14:04:07 +02:00
root-tree.c
btrfs: fix silent failure when deleting root reference
2022-09-05 10:27:43 +02:00
scrub.c
btrfs: scrub: try to fix super block errors
2022-10-26 13:22:55 +02:00
send.c
btrfs: send: in case of IO error log it
2022-02-23 11:59:55 +01:00
send.h
…
space-info.c
btrfs: prevent __btrfs_dump_space_info() to underflow its free space
2021-09-30 10:09:22 +02:00
space-info.h
btrfs: take overcommit into account in inc_block_group_ro
2020-10-17 10:11:21 +02:00
struct-funcs.c
btrfs: tie extent buffer and it's token together
2019-09-09 14:59:16 +02:00
super.c
btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan
2021-01-19 18:26:14 +01:00
sysfs.c
btrfs: sysfs: use NOFS for device creation
2020-08-21 13:05:22 +02:00
sysfs.h
btrfs: sysfs: move helper macros to sysfs.c
2019-09-09 14:59:08 +02:00
transaction.c
btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT
2021-08-15 13:08:05 +02:00
transaction.h
btrfs: fix race between marking inode needs to be logged and log syncing
2021-09-03 10:08:15 +02:00
tree-checker.c
btrfs: tree-checker: check for overlapping extent items
2022-09-05 10:27:47 +02:00
tree-checker.h
btrfs: get fs_info from eb in btrfs_check_chunk_valid
2019-04-29 19:02:39 +02:00
tree-defrag.c
…
tree-log.c
btrfs: unify lookup return value when dir entry is missing
2022-09-05 10:27:46 +02:00
tree-log.h
btrfs: do not commit logs and transactions during link and rename operations
2021-08-08 09:04:07 +02:00
ulist.c
…
ulist.h
…
uuid-tree.c
btrfs: handle ENOENT in btrfs_uuid_tree_iterate
2019-12-31 16:42:05 +01:00
volumes.c
btrfs: harden identification of a stale device
2022-09-15 12:04:53 +02:00
volumes.h
btrfs: fix readahead hang and use-after-free after removing a device
2020-11-05 11:43:27 +01:00
xattr.c
btrfs: check if root is readonly while setting security xattr
2022-09-05 10:27:43 +02:00
xattr.h
btrfs: cleanup btrfs_setxattr_trans and drop transaction parameter
2019-04-29 19:02:44 +02:00
zlib.c
btrfs: compression: replace set_level callbacks by a common helper
2019-09-09 14:59:11 +02:00
zstd.c
btrfs: move cond_wake_up functions out of ctree
2019-09-09 14:59:15 +02:00