iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
dbfc9e9878
linux/fs/nfs
History
Petr Malat dbfc9e9878 NFS: Remove superfluous kmap in nfs_readdir_xdr_to_array 
Array is mapped by nfs_readdir_get_array(), the further kmap is a result
of a bad merge and should be removed.

This resource leakage can be exploited for DoS by receptively reading
a content of a directory on NFS (e.g. by running ls).

Fixes: 67a56e9743171 ("NFS: Fix memory leaks and corruption in readdir")
Signed-off-by: Petr Malat <oss@malat.biz>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-03-20 09:07:37 +01:00
..
blocklayout
pnfs/blocklayout: off by one in bl_map_stripe()
2018-09-09 20:01:23 +02:00
filelayout
NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
2017-01-19 20:18:05 +01:00
flexfilelayout
NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
2019-07-10 09:55:39 +02:00
objlayout
mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros
2016-04-04 10:41:08 -07:00
cache_lib.c
NFS: cache_lib: use complete() instead of complete_all()
2016-09-23 09:40:12 -04:00
cache_lib.h
…
callback_proc.c
NFS: Fix bool initialization/comparison
2020-02-14 16:31:07 -05:00
callback_xdr.c
NFSv4.0 fix client reference leak in callback
2018-09-19 22:47:13 +02:00
callback.c
nfs: make nfs4_cb_sv_ops static
2017-10-08 10:26:10 +02:00
callback.h
nfs: add handling for CB_NOTIFY_LOCK in client
2016-09-22 13:56:04 -04:00
client.c
NFS: Fix a typo in nfs_init_timeout_values()
2019-05-04 08:49:08 +02:00
delegation.c
NFS: Fix a soft lockup in the delegation recovery code
2020-01-29 10:24:17 +01:00
delegation.h
NFS: Fix a soft lockup in the delegation recovery code
2020-01-29 10:24:17 +01:00
dir.c
NFS: Remove superfluous kmap in nfs_readdir_xdr_to_array
2020-03-20 09:07:37 +01:00
direct.c
nfs: don't dirty kernel pages read by direct-io
2018-12-21 14:11:36 +01:00
dns_resolve.c
…
dns_resolve.h
…
file.c
NFS: Sync the correct byte range during synchronous writes
2017-09-13 14:13:37 -07:00
fscache-index.c
…
fscache.c
…
fscache.h
…
getroot.c
…
inode.c
NFSv4: Handle the special Linux file open access mode
2019-08-04 09:33:27 +02:00
internal.h
NFS: Fix 2 use after free issues in the I/O code
2017-09-13 14:13:37 -07:00
io.c
NFS: Fix a race between mmap() and O_DIRECT
2018-02-17 13:21:14 +01:00
iostat.h
…
Kconfig
nfs: NFS_SWAP should depend on SWAP
2020-02-14 16:31:09 -05:00
Makefile
NFS: Do not serialise O_DIRECT reads and writes
2016-07-05 19:11:04 -04:00
mount_clnt.c
NFS: Remove unneeded NFS_DEBUG checking before define NFSDBG_FACILITY
2015-10-21 15:49:23 -05:00
namespace.c
fs: Better permission checking for submounts
2017-03-15 10:02:44 +08:00
netns.h
fs: nfs: Make nfs boot time y2038 safe
2016-10-04 16:20:26 -04:00
nfs2super.c
…
nfs2xdr.c
…
nfs3_fs.h
…
nfs3acl.c
posix_acl: Inode acl caching fixes
2016-03-31 00:30:15 -04:00
nfs3client.c
nfs4: flexfiles: respect noresvport when establishing connections to DSes
2016-07-19 16:23:25 -04:00
nfs3proc.c
vfs: Remove {get,set,remove}xattr inode operations
2016-10-07 21:48:36 -04:00
nfs3super.c
…
nfs3xdr.c
…
nfs4_fs.h
NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
2019-09-06 10:19:33 +02:00
nfs4client.c
NFS: Fix bool initialization/comparison
2020-02-14 16:31:07 -05:00
nfs4file.c
NFSv4: Fix return values for nfs4_file_open()
2019-09-21 07:14:12 +02:00
nfs4getroot.c
…
nfs4idmap.c
NFSv4: Fix possible 1-byte stack overflow in nfs_idmap_read_and_verify_message
2018-07-03 11:23:16 +02:00
nfs4idmap.h
…
nfs4namespace.c
fs: Better permission checking for submounts
2017-03-15 10:02:44 +08:00
nfs4proc.c
NFSv4: try lease recovery on NFS4ERR_EXPIRED
2020-02-14 16:31:09 -05:00
nfs4renewd.c
NFSv4: Cap the transport reconnection timer at 1/2 lease period
2016-08-05 19:22:22 -04:00
nfs4session.c
fs/nfs: Fix used uninitialized warn in nfs4_slot_seqid_in_use()
2016-11-07 16:11:30 -05:00
nfs4session.h
NFSv4.1: Don't deadlock the state manager on the SEQUENCE status flags
2016-09-27 14:31:27 -04:00
nfs4state.c
NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
2019-09-06 10:19:33 +02:00
nfs4super.c
…
nfs4sysctl.c
nfs: Do not convert nfs_idmap_cache_timeout to jiffies
2018-05-30 07:50:20 +02:00
nfs4trace.c
pNFS: Modify pnfs_update_layout tracepoints to use layout stateid
2015-12-28 09:57:14 -05:00
nfs4trace.h
NFS: Avoid RCU usage in tracepoints
2017-11-30 08:39:04 +00:00
nfs4xdr.c
fs: nfs: Fix possible null-pointer dereferences in encode_attrs()
2019-10-17 13:42:10 -07:00
nfs42.h
NFS: Add COPY nfs operation
2016-05-17 15:47:55 -04:00
nfs42proc.c
NFSv4: Fix reboot recovery in copy offload
2017-03-12 06:41:51 +01:00
nfs42xdr.c
NFSv4.2: Fix warning "variable ‘stateids’ set but not used"
2016-07-24 17:36:06 -04:00
nfs.h
…
nfsroot.c
nfsroot: make nfsroot to accept the 1024 bytes long directory name
2015-10-21 15:49:19 -05:00
nfstrace.c
…
nfstrace.h
NFS client updates for Linux 4.8
2016-07-30 16:33:25 -07:00
pagelist.c
NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
2019-09-21 07:14:13 +02:00
pnfs_dev.c
…
pnfs_nfs.c
NFS pnfs data server multipath session trunking
2016-09-19 13:08:37 -04:00
pnfs.c
NFS: Fix bool initialization/comparison
2020-02-14 16:31:07 -05:00
pnfs.h
pNFS: On error, do not send LAYOUTGET until the LAYOUTRETURN has completed
2017-01-09 08:32:24 +01:00
proc.c
NFSv2: Fix write regression
2019-09-21 07:14:16 +02:00
read.c
mm: remove page_file_index
2016-10-07 18:46:28 -07:00
super.c
fs/nfs: Fix nfs_parse_devname to not modify it's argument
2020-01-29 10:24:17 +01:00
symlink.c
switch ->get_link() to delayed_call, kill ->put_link()
2015-12-30 13:01:03 -05:00
sysctl.c
…
unlink.c
qstr: constify instances in nfs
2016-07-20 23:30:06 -04:00
write.c
NFS: Fix unstable write completion
2018-03-18 11:18:54 +01:00