Elena Reshetova d4f0284a59 fs, nilfs: convert nilfs_root.count from atomic_t to refcount_t
atomic_t variables are currently used to implement reference counters
with the following properties:

 - counter is initialized to 1 using atomic_set()
 - a resource is freed upon counter reaching zero
 - once counter reaches zero, its further
   increments aren't allowed
 - counter schema uses basic atomic operations
   (set, inc, inc_not_zero, dec_and_test, etc.)

Such atomic variables should be converted to a newly provided refcount_t
type and API that prevents accidental counter overflows and underflows.
This is important since overflows and underflows can lead to
use-after-free situation and be exploitable.

The variable nilfs_root.count is used as pure reference counter.
Convert it to refcount_t and fix up the operations.

Link: http://lkml.kernel.org/r/1509367935-3086-3-git-send-email-konishi.ryusuke@lab.ntt.co.jp
Signed-off-by: Elena Reshetova <elena.reshetova@intel.com>
Signed-off-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp>
Suggested-by: Kees Cook <keescook@chromium.org>
Reviewed-by: David Windsor <dwindsor@gmail.com>
Reviewed-by: Hans Liljestrand <ishkamiel@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2017-11-17 16:10:03 -08:00
..
2017-11-16 11:41:22 -08:00
2017-11-16 11:41:22 -08:00
2017-11-15 18:21:06 -08:00
2017-11-15 18:21:04 -08:00
2017-08-24 13:23:03 -07:00
2017-11-14 14:44:04 -08:00
2017-11-17 09:51:57 -08:00
2017-11-17 09:51:57 -08:00
2017-11-16 12:10:21 -08:00
2017-11-16 11:41:22 -08:00
2017-11-17 09:51:57 -08:00
2017-11-14 13:53:18 -08:00
2017-11-15 13:46:33 -08:00
2017-11-16 11:41:22 -08:00
2017-11-16 11:41:22 -08:00
2017-11-17 16:10:00 -08:00
2017-11-17 09:51:57 -08:00
2017-09-04 19:05:15 -04:00
2017-04-17 12:52:27 -04:00
2017-11-17 09:51:57 -08:00
2017-11-15 18:21:04 -08:00
2017-06-22 11:44:55 -04:00