Li Zefan
cdc6a39525
Btrfs: avoid possible use-after-free in clear_extent_bit() ...
clear_extent_bit()
{
next_node = rb_next(&state->rb_node);
...
clear_state_bit(state); <-- this may free next_node
if (next_node) {
state = rb_entry(next_node);
...
}
}
clear_state_bit() calls merge_state() which may free the next node
of the passing extent_state, so clear_extent_bit() may end up
referencing freed memory.
Signed-off-by: Li Zefan <lizf@cn.fujitsu.com>
2012-04-18 19:22:18 +02:00
2012-01-10 15:09:01 -08:00
2012-01-06 23:19:54 -05:00
2012-01-03 22:55:04 -05:00
2012-03-16 17:01:41 -07:00
2012-02-25 12:10:27 -08:00
2012-01-03 22:52:40 -05:00
2012-01-03 22:54:53 -05:00
2012-04-18 19:22:18 +02:00
2012-01-03 22:54:07 -05:00
2012-02-02 15:47:33 -08:00
2012-03-06 21:50:15 -06:00
2012-01-10 11:13:16 -05:00
2012-01-03 22:54:57 -05:00
2012-01-06 23:15:54 -05:00
2012-01-24 10:47:41 -08:00
2012-01-08 20:19:03 -05:00
2012-01-10 14:55:55 -08:00
2012-02-28 16:55:30 -08:00
2012-01-03 22:52:40 -05:00
2012-01-09 12:51:01 -08:00
2012-01-11 13:39:02 +01:00
2012-01-09 12:51:21 -08:00
2012-01-10 11:54:07 -05:00
2012-01-09 12:09:47 -08:00
2012-01-03 22:55:10 -05:00
2011-07-21 10:59:16 -07:00
2012-01-12 12:39:21 -08:00
2012-02-28 09:52:39 +00:00
2012-01-06 23:19:54 -05:00
2012-01-10 17:48:52 -05:00
2012-01-06 23:19:54 -05:00
2012-01-03 22:54:54 -05:00
2012-01-03 22:52:41 -05:00
2012-01-12 20:13:09 -08:00
2012-01-09 10:48:11 -05:00
2012-01-11 13:36:57 +01:00
2012-01-10 11:54:07 -05:00
2012-01-11 09:53:51 +00:00
2012-01-08 13:10:57 -08:00
2012-01-13 09:32:20 +10:30
2012-02-01 11:10:24 -08:00
2012-01-08 12:19:57 -08:00
2012-01-06 23:19:54 -05:00
2012-02-17 17:34:03 -05:00
2012-01-14 12:26:41 -08:00
2012-03-16 17:14:44 -07:00
2011-11-26 19:58:47 -08:00
2012-01-14 18:01:42 -08:00
2012-02-24 09:17:09 +00:00
2012-02-13 20:45:39 -05:00
2012-01-03 22:55:01 -05:00
2012-01-03 22:52:40 -05:00
2012-02-02 12:55:17 -08:00
2011-11-18 13:49:00 -08:00
2012-01-19 13:54:36 -05:00
2012-02-13 20:45:39 -05:00
2012-01-03 22:55:07 -05:00
2012-01-10 16:30:54 -08:00
2012-01-10 13:45:22 -08:00
2012-01-13 10:34:57 -08:00
2012-01-24 12:12:32 -08:00
2012-01-06 23:16:53 -05:00
2012-01-15 13:46:02 +02:00
2012-03-10 16:05:38 -05:00
2012-01-06 23:19:54 -05:00
2012-02-21 10:12:43 -06:00
2012-03-09 18:59:59 -08:00
2011-07-26 12:57:09 -04:00
2012-01-03 22:55:11 -05:00
2012-01-03 22:54:54 -05:00
2012-03-05 13:51:32 -08:00
2011-07-20 01:43:10 -04:00
2012-03-02 11:38:15 -08:00
2012-01-06 23:16:53 -05:00
2011-10-31 19:30:31 -04:00
2012-02-08 22:07:18 +01:00
2012-03-02 10:38:33 +01:00
2012-01-03 22:54:07 -05:00
2011-12-13 11:18:17 -08:00
2012-01-15 12:49:56 -08:00
2012-02-13 20:45:39 -05:00
2012-03-04 15:51:42 -08:00
2011-05-31 16:33:35 +02:00
2012-02-23 15:56:21 -08:00
2011-05-25 08:39:26 -07:00
2012-03-18 12:25:04 -07:00
2012-03-05 15:49:42 -08:00
2012-01-06 23:16:53 -05:00
2012-01-06 23:20:13 -05:00
2012-01-03 22:52:39 -05:00
2012-02-01 16:53:40 +08:00
2011-08-01 02:10:06 -04:00
2012-03-10 17:07:28 -05:00
2012-01-06 23:20:12 -05:00
2012-01-05 15:40:12 -08:00
2012-02-07 07:51:30 +01:00
2012-01-09 12:51:01 -08:00
2012-01-10 16:30:51 -08:00
2012-01-03 22:54:07 -05:00
2011-12-26 10:25:26 -08:00
2012-01-06 23:15:54 -05:00
2011-05-25 08:39:26 -07:00
2012-01-06 23:20:12 -05:00
2012-01-12 09:19:54 +01:00
2012-03-10 17:05:30 -05:00
2012-01-08 13:21:22 -08:00
2012-01-06 23:16:53 -05:00
2012-01-12 20:13:04 -08:00
2012-01-03 22:57:11 -05:00
2012-01-03 22:57:11 -05:00
2011-10-28 14:58:54 +02:00
2012-01-06 23:19:54 -05:00
2011-10-31 17:30:44 -07:00
2012-02-21 17:24:20 -08:00
2012-01-03 22:52:40 -05:00
2012-02-24 11:42:50 -08:00
2012-01-03 22:54:07 -05:00
2011-11-02 12:53:43 +01:00
2011-11-02 12:53:42 +01:00
2012-01-03 22:53:07 -05:00
2012-02-13 20:45:38 -05:00
2012-01-03 22:54:07 -05:00
2011-06-14 11:46:14 +02:00
2012-01-03 22:52:40 -05:00
cdc6a39525