Ryusuke Konishi d7178c79d9 nilfs2: fix NULL pointer dereference in nilfs_load_super_block() ...

According to the report from Slicky Devil, nilfs caused kernel oops at
nilfs_load_super_block function during mount after he shrank the
partition without resizing the filesystem:

 BUG: unable to handle kernel NULL pointer dereference at 00000048
 IP: [<d0d7a08e>] nilfs_load_super_block+0x17e/0x280 [nilfs2]
 *pde = 00000000
 Oops: 0000 [#1] PREEMPT SMP
 ...
 Call Trace:
  [<d0d7a87b>] init_nilfs+0x4b/0x2e0 [nilfs2]
  [<d0d6f707>] nilfs_mount+0x447/0x5b0 [nilfs2]
  [<c0226636>] mount_fs+0x36/0x180
  [<c023d961>] vfs_kern_mount+0x51/0xa0
  [<c023ddae>] do_kern_mount+0x3e/0xe0
  [<c023f189>] do_mount+0x169/0x700
  [<c023fa9b>] sys_mount+0x6b/0xa0
  [<c04abd1f>] sysenter_do_call+0x12/0x28
 Code: 53 18 8b 43 20 89 4b 18 8b 4b 24 89 53 1c 89 43 24 89 4b 20 8b 43
 20 c7 43 2c 00 00 00 00 23 75 e8 8b 50 68 89 53 28 8b 54 b3 20 <8b> 72
 48 8b 7a 4c 8b 55 08 89 b3 84 00 00 00 89 bb 88 00 00 00
 EIP: [<d0d7a08e>] nilfs_load_super_block+0x17e/0x280 [nilfs2] SS:ESP 0068:ca9bbdcc
 CR2: 0000000000000048

This turned out due to a defect in an error path which runs if the
calculated location of the secondary super block was invalid.

This patch fixes it and eliminates the reported oops.

Reported-by: Slicky Devil <slicky.dvl@gmail.com>
Signed-off-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp>
Tested-by: Slicky Devil <slicky.dvl@gmail.com>
Cc: <stable@vger.kernel.org>	[2.6.30+]
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2012-03-16 17:14:44 -07:00

..

alloc.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

alloc.h

nilfs2: use little-endian bitops

2011-03-23 19:46:18 -07:00

bmap.c

nilfs2: get rid of NILFS_I_NILFS

2011-05-10 22:21:56 +09:00

bmap.h

nilfs2: record used amount of each checkpoint in checkpoint list

2011-03-08 14:58:31 +09:00

btnode.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

btnode.h

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

btree.c

nilfs2: fix missing block address termination in btree node shrinking

2011-06-11 15:51:15 +09:00

btree.h

nilfs2: get rid of nilfs_bmap_union

2010-07-23 10:02:14 +09:00

cpfile.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

cpfile.h

nilfs2: use iget for all metadata files

2010-10-23 09:24:38 +09:00

dat.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

dat.h

nilfs2: use iget for all metadata files

2010-10-23 09:24:38 +09:00

dir.c

nilfs: propagate umode_t

2012-01-03 22:55:04 -05:00

direct.c

nilfs2: record used amount of each checkpoint in checkpoint list

2011-03-08 14:58:31 +09:00

direct.h

nilfs2: get rid of nilfs_bmap_union

2010-07-23 10:02:14 +09:00

export.h

nilfs2: make snapshots in checkpoint tree exportable

2010-10-23 09:24:34 +09:00

file.c

fs: push i_mutex and filemap_write_and_wait down into ->fsync() handlers

2011-07-20 20:47:59 -04:00

gcinode.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

ifile.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

ifile.h

nilfs2: use iget for all metadata files

2010-10-23 09:24:38 +09:00

inode.c

nilfs: propagate umode_t

2012-01-03 22:55:04 -05:00

ioctl.c

nilfs2: avoid overflowing segment numbers in nilfs_ioctl_clean_segments()

2012-02-08 19:03:51 -08:00

Kconfig

Revert "task_struct: make journal_info conditional"

2009-12-17 13:23:24 -08:00

Makefile

nilfs2: get rid of GCDAT inode

2010-10-23 09:24:38 +09:00

mdt.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

mdt.h

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

namei.c

switch ->mknod() to umode_t

2012-01-03 22:54:54 -05:00

nilfs.h

nilfs: propagate umode_t

2012-01-03 22:55:04 -05:00

page.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

page.h

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

recovery.c

nilfs2: use list_first_entry

2011-05-10 22:21:56 +09:00

segbuf.c

nilfs2: super root size should change depending on inode size

2011-05-10 22:21:44 +09:00

segbuf.h

nilfs2: get rid of macros for segment summary information

2010-07-23 10:02:09 +09:00

segment.c

freezer: unexport refrigerator() and update try_to_freeze() slightly

2011-11-21 12:32:22 -08:00

segment.h

nilfs2: get rid of private page allocator

2011-05-10 22:21:44 +09:00

sufile.c

nilfs2: use mark_buffer_dirty to mark btnode or meta data dirty

2011-05-10 22:21:57 +09:00

sufile.h

nilfs2: get rid of NILFS_I_NILFS

2011-05-10 22:21:56 +09:00

super.c

vfs: switch ->show_options() to struct dentry *

2012-01-06 23:19:54 -05:00

the_nilfs.c

nilfs2: fix NULL pointer dereference in nilfs_load_super_block()

2012-03-16 17:14:44 -07:00

the_nilfs.h

nilfs2: implement resize ioctl

2011-05-10 22:21:46 +09:00