Miklos Szeredi b403f0e37a 9p: use file_dentry() ...

v9fs may be used as lower layer of overlayfs and accessing f_path.dentry
can lead to a crash.  In this case it's a NULL pointer dereference in
p9_fid_create().

Fix by replacing direct access of file->f_path.dentry with the
file_dentry() accessor, which will always return a native object.

Reported-by: Alessio Igor Bogani <alessioigorbogani@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Tested-by: Alessio Igor Bogani <alessioigorbogani@gmail.com>
Fixes: 4bacc9c9234c ("overlayfs: Make f_path always point to the overlay and f_inode to the underlay")
Cc: <stable@vger.kernel.org>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

2016-06-30 23:28:09 -04:00

..

acl.c

switch xattr_handler->set() to passing dentry and inode separately

2016-05-27 15:39:43 -04:00

acl.h

9p: switch v9fs_set_create_acl() to inode+fid, do it before d_instantiate()

2013-02-26 02:46:07 -05:00

cache.c

fs/9p: use fscache mutex rather than spinlock

2016-01-09 02:57:21 -05:00

cache.h

fs: 9p: cache.h: Add #define of include guard

2015-11-11 02:19:50 -05:00

fid.c

9p: switch to %p[dD]

2014-10-09 02:39:04 -04:00

fid.h

9p: v9fs_fid_add() can't fail now

2013-02-28 01:18:14 -05:00

Kconfig

fs/9p: xattr: add trusted and security namespaces

2013-07-07 22:02:18 -05:00

Makefile

9p: xattr simplifications

2015-11-13 20:34:33 -05:00

v9fs_vfs.h

9p: switch p9_client_read() to passing struct iov_iter *

2015-04-11 22:28:27 -04:00

v9fs.c

kmemcg: account certain kmem allocations to memcg

2016-01-14 16:00:49 -08:00

v9fs.h

fs/9p: use fscache mutex rather than spinlock

2016-01-09 02:57:21 -05:00

vfs_addr.c

direct-io: eliminate the offset argument to ->direct_IO

2016-05-01 19:58:39 -04:00

vfs_dentry.c

VFS: normal filesystems (and lustre): d_inode() annotations

2015-04-15 15:06:57 -04:00

vfs_dir.c

9p: switch to ->iterate_shared()

2016-05-09 11:41:16 -04:00

vfs_file.c

9p: use file_dentry()

2016-06-30 23:28:09 -04:00

vfs_inode_dotl.c

switch ->get_link() to delayed_call, kill ->put_link()

2015-12-30 13:01:03 -05:00

vfs_inode.c

don't bother with ->d_inode->i_sb - it's always equal to ->d_sb

2016-04-10 17:11:51 -04:00

vfs_super.c

mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros

2016-04-04 10:41:08 -07:00

xattr.c

switch xattr_handler->set() to passing dentry and inode separately

2016-05-27 15:39:43 -04:00

xattr.h

9p: xattr simplifications

2015-11-13 20:34:33 -05:00